Search

2 results for “netresec”

1. 

   𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @netresec

   2026-10-12

   New #AtlasRAT loader checks in with "BFuck" and the C2 protocol switched to using TLS
   📡 23.226.57.50:443
   📡 38.76.177.46:443
   📡 43.99.101.175:443
   📡 45.142.152.180:443
   📡 116.204.169.70:443
   📡 150.158.50.175:443
   📡 156.234.7.48:443
   📡 192.252.180.45:443
   https://netresec.com/?b=26A6cc8

   #atlasrat
2. 

   𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @netresec

   2026-10-12

   Atlas RAT C2 protocol evolution:

   • November 2025: SFuck check-in and cleartext C2 headers
   • March 2026: XOR encrypted C2 headers
   • May 2026: BFuck check-in
   • July 2026: C2 over TLS