Threats Tagged 'websocket c2'
View all threats tagged with 'websocket c2'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'websocket c2'
Click on any threat for detailed analysis and mitigation recommendations
Upgrades MaaS Ecosystem with Modular Tools 0 TAG-195, a financially motivated malware-as-a-service developer, has evolved its ecosystem with four new modular malware families: TinyEgg, ChonkyChicken, a modular ChonkyChicken variant, and ChromEggscalator. These malware families feature WebSocket-based command-and-control, persistence via Run keys, string obfuscation, and execution through legitimate Windows binaries. TinyEgg serves as a lightweight initial-access backdoor, while ChonkyChicken adds browser credential theft and session automation. The modular architecture reduces detection risk and allows selective capability deployment. TAG-127 has deployed TinyEgg using fake security verification pages in ClickFix campaigns. This shift represents a move toward operator-driven tooling within the TAG-195 MaaS ecosystem. Join the discussion | AlienVault OTX General | 07/23/2026, 16:30:34 UTC Added: 07/23/2026, 23:37:06 UTC |
Showing 1 to 1 of 1 result