News for hackers. Stuff that matters.

A comment on Ask HN: What are these strange random strings spamming my blog?. Parent comment

Re:Ask HN: What are these strange random strings spamming my... by shanebellone on Monday February 20, 2023 @07:54AM (#34867634)
Recently I've been playing with a GSM modem to send and consume SMS programmatically. It's simple to echo a CLI command and response over SMS with burner sims.

I immediately wondered if hackers were using this approach for command and control.

[ Parent | on HN ]
Re:Ask HN: What are these strange random strings spamming my... by red-iron-pine on Monday February 20, 2023 @10:39AM (#34869117)
They definitely do, with real life exploits using pastebin or reddit as ways to post C2 code.

Effective, because you can post it as HTTP/HTTPS traffic that generally flies under the radar of a lot of IDS/IPS systems. Even if they inspect the packet it's just a buncha random reddit gibberish and you could use memes as commands, e.g. "I also choose this guy's wife" == launch attack

[ Parent | on HN ]