Ghost Calls: Abusing Web Conferencing for Covert Command & Control (Part 1 of 2)
Web conferencing covert C2 turns the most trusted traffic on an enterprise network, the daily Zoom and Teams calls defenders are told to exempt from inspection, into an interactive command-and-control channel. In the middle of a particularly tight red team engagement, we hit a familiar wall. Our long-term implant was rock solid: quiet, persistent, and […]