CiberLATAMbywhalemate

#WebSocket C2

This archive brings together coverage on the use of WebSocket channels for command and control in malicious activity, with attention to how adversaries keep communications hidden and harder to inspect. Readers will find reporting on tactics, detection, telemetry, and defensive measures relevant to cybersecurity across Latin America.

Casbaneiro: Two Campaigns and an Active C2

Unit 42 tracked two Casbaneiro activity lines, including an abused remote access tool, Delphi side-loading and a malicious Chromium extension.

Nov 2, 2026 · 41 min