Attackers leveraging Dark Utilities 'C2-as-a-Service' (C2aaS) platform in malware campaigns

guest · Aug 4, 2022

Thousands of hackers flock to 'Dark Utilities' C2-as-a-Service
August 4, 2022

Security researchers found a new service called Dark Utilities that provides an easy and inexpensive way for cybercriminals to set up a command and control (C2) center for their malicious operations.

The Dark Utilities service provides threat actors a platform that supports Windows, Linux, and Python-based payloads, and eliminates the effort associated with implementing a C2 communication channel.
A C2 server is how adversaries control their malware in the wild, sending out commands, configurations and new payloads, and receiving data collected from compromised systems.
Click to expand...

A report from Cisco Talos says that the service has around 3,000 active subscribers, which would bring the operators a revenue of about EUR 30,000.

Multiple architectures are supported and it appears that the operators are planning on expanding the list to provide a larger set of options of devices that could be targeted.
The selected payload also establishes persistence on the target system by creating a Registry key on Windows, or a Crontab entry or a Systemd service on Linux.
Click to expand...

Cisco Talos: Attackers leveraging Dark Utilities "C2aaS" platform in malware campaigns

EXECUTIVE SUMMARY

Dark Utilities, released in early 2022, is a platform that provides full-featured C2 capabilities to adversaries.

It is marketed as a means to enable remote access, command execution, distributed denial-of-service (DDoS) attacks and cryptocurrency mining operations on infected systems.

Payloads provided by the platform support Windows, Linux and Python-based implementations and are hosted within the Interplanetary File System (IPFS), making them resilient to content moderation or law enforcement intervention.

Since its initial release, we've observed malware samples in the wild leveraging it to facilitate remote access and cryptocurrency mining.

Click to expand...

Log in or Sign up

Attackers leveraging Dark Utilities 'C2-as-a-Service' (C2aaS) platform in malware campaigns

guest Guest

Log in or Sign up

Attackers leveraging Dark Utilities 'C2-as-a-Service' (C2aaS) platform in malware campaigns

guest Guest

Useful Searches