Sunday 05 July 2026 22:32:48 GMT+02:00
Netcrook
#WebSocket C2
STOCKSTAY and the Quiet Art of Looking Legitimate
A .NET backdoor tied to stealthy WebSocket command traffic and environment-based keying shows how modern malware can hide inside ordinary application behavior.
Windows Learns a New Trick: SprySOCKS Reappears with Multiple C2 Paths
A long-running espionage backdoor has been observed in Windows form, with transport flexibility and kernel-level stealth that can complicate routine detection.