Smuggling Botnet C2 Through Users’ Browser | Matthew Bernath | WWHF San Diego 2022

Attend Wild West Hackin' Fest (WWHF) in Deadwood, In-Person and Virtual!
https://wildwesthackinfest.com/deadwood/


Command and control (C2) infrastructure are vital to the operation of botnets and their operators take active measures to prevent their discovery. In this presentation, I demonstrate that an attacker could leverage public advertisement services to obfuscate the source of their command and control servers by co-opting web users’ browsers to smuggle data.
My colleagues and I created a system that garners unaware users that could provide the …

botnet browser san san diego smuggling wwhf