Hands-On Red Team Tactics

Command and Control Server

The malware which would be properly executed and backdoored with persistence on the system will call back and report to the Command and control Server (C2). The malware will then be ready to execute the commands that would be instructed by the threat actors. These commands could differ from a simple getting to know the username and roles to dumping all the employee credentials.