🦄 @scythe_io @grimmcyber, Sr Advisor @IST_Org & NatSec Sr Fellow, Co-Fdr @ICS_Village, @c2_matrix co-creator, USMA Science Board, Angel Investor, US Army Offcr
Mar 20 • 10 tweets • 2 min read
Thread: How real adversaries are using C2 in 2026 (From building @scythe_io + watching nation-state/red team playbooks)
Spoiler: It's not just fancy Cobalt Strike beacons anymore. 🦄 1/10
#1: Living off the land + cloud-native C2
Adversaries chain legitimate cloud services (Azure Functions, AWS Lambda, OneDrive, SharePoint) for C2.
- Free tradecraft: blends into normal traffic
- No custom binary needed
- Evasion via trusted domains 2/10
Nov 14, 2018 • 15 tweets • 10 min read
.@DAlperovitch on the Top 10 Myths in Cybersecurity @ccdcoe@ArmyCyberInst#CyConUS.
A different take on it's not about the cybers. It's about Russia, China, Iran, and North Korea.