Reddit NetSec

AlienVault OTX General

CVE Database V5

Exploit-DB RSS Feed

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

AdaptixC2, an open-source post-exploitation and adversarial emulation framework, has been observed being used in real-world attacks. This versatile tool allows threat actors to execute commands, transfer files, and perform data exfiltration on compromised systems. Its open-source nature enables easy customization, making it highly flexible and dangerous. The framework supports sophisticated tunneling capabilities, modular design with extenders, and various beacon agent formats. Two infection scenarios were analyzed: one using social engineering via Microsoft Teams, and another likely involving AI-generated scripts. The increasing prevalence of AdaptixC2 in attacks, including its use alongside ransomware, highlights the growing trend of attackers leveraging customizable frameworks to evade detection.

AdaptixC2 is an open-source post-exploitation and adversarial emulation framework that has recently been observed in real-world cyberattacks. This framework provides threat actors with a versatile toolkit to execute a wide range of malicious activities on compromised systems, including command execution, file transfer, and data exfiltration. Its open-source nature allows attackers to easily customize and extend its capabilities, making it highly adaptable and difficult to detect. Key technical features include sophisticated tunneling capabilities that enable covert communication channels, a modular design with extenders to add or modify functionality, and support for various beacon agent formats to maintain persistent and stealthy presence within victim networks. Two primary infection vectors have been identified: one leveraging social engineering tactics via Microsoft Teams to trick users into executing malicious payloads, and another involving AI-generated scripts that automate and enhance the infection process. The framework’s increasing use in conjunction with ransomware campaigns underscores a growing trend where attackers utilize customizable frameworks to evade traditional detection mechanisms and escalate their attacks. Indicators of compromise include multiple file hashes, YARA rules, and a set of suspicious domains associated with command and control infrastructure. The framework’s tactics align with numerous MITRE ATT&CK techniques such as process injection, credential dumping, tunneling, and persistence mechanisms, highlighting its comprehensive post-exploitation capabilities. Although no CVE or known exploits in the wild are reported, the active use of AdaptixC2 in targeted campaigns demonstrates its operational threat status.

Detailed information about AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks. Get real-time updates, technical details, and mitigation stra

Title	Severity	Type	Source	Date

Threats Tagged 'adversarial emulation'

Filter Threats

Threats Tagged 'adversarial emulation'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility