Threat Intelligence20 min read
A ToShell Operation Where the Model Made the Decisions
The logs of an exposed C2 server revealed an AI layer making attack decisions without a human in the loop, and 7.46 GB pulled from 18 machines.
BLOG
Field notes from the hunt.
Research write-ups, data analysis and product notes from the Etugen team.
Threat Intelligence16 min read
Command and Control Hidden in the Chain: Anatomy of an EtherHiding Operation
An open directory led to a C2 resolver stored on the blockchain, a seven-week rotation history, and an unexpected antivirus engine.
GET ACCESS
Start hunting with your own indicators.
Look up an IP, domain or hash on the Free plan.
Get access See features