Re:Cybercriminals Use Malicious Memes That Communicate with ...
by dotancohen on Tuesday December 18, 2018 @10:56AM
(#18707446)
Because that would reveal the location (IP address) of the C&C server, in addition to making it a point of failure.
[ Parent
| on HN ]
Re:Cybercriminals Use Malicious Memes That Communicate with ...
by mfoy_ on Tuesday December 18, 2018 @04:33PM
(#18710795)
But the output of all the commands still sends to the C&C server, so I don't see how this protects that. Unless, as the other user suggested, the memes could actually also contain the IP to use for the C&C server. So the "order" is akin to "upload username to ###.##.###.#"