Security Research

A deep dive into using Chrome extensions as a covert C2 relay, combining a C++ local agent, browser extension message passing, and a Flask command server.

Technical analysis of using Azure Blob Storage as a covert command-and-control channel, leveraging legitimate Windows.net traffic to evade network detection.