--- title: "#c2 articles | Hashnode" description: "Explore 7 articles tagged #c2 on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/c2" --- Tag # #c2 7 posts · 3 followers [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Oct 6](https://hashnode.com/posts/closedquorum-when-4-ai-models-turn-into-c2-servers-for-malware/6ac4a02992beefc6d38bfa7e) ### [CLOSEDQUORUM: When 4 AI models turn into C2 servers for Malware](https://blog.fiscybersec.com/closedquorum-when-4-ai-models-turn-into-c2-servers-for-malware?utm_source=hashnode&utm_medium=feed) Overview Imagine a system intrusion where the mastermind is not sitting in front of the screen, is not typing any C2 control commands, and is even... sleeping. Instead, the four leading commercial art 11 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/closedquorum-when-4-ai-models-turn-into-c2-servers-for-malware?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Sep 23](https://hashnode.com/posts/clickfix-browser-campaign-embed-c2-into-google-sheets/6ab37cb663fd161af3f451e3) ### [ClickFix Browser Campaign: Embed C2 Into Google Sheets](https://blog.fiscybersec.com/clickfix-browser-campaign-embed-c2-into-google-sheets?utm_source=hashnode&utm_medium=feed) Executive Summary What happens when the expensive EDR system is completely "blind", and the enterprise's Secure Web Gateway (SWG) happily licenses malicious traffic just because it sends to... docs.go 11 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/clickfix-browser-campaign-embed-c2-into-google-sheets?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Aug 31](https://hashnode.com/posts/twinloot-when-microsoft-cloud-becomes-a-hacker-s-control-center/6a94e46c76cf213b3ee03fe2) ### [TWINLOOT: When Microsoft Cloud Becomes a Hacker's "Control Center"](https://blog.fiscybersec.com/twinloot-when-microsoft-cloud-becomes-a-hacker-s-control-center?utm_source=hashnode&utm_medium=feed) Imagine a nightmare scenario for every SOC team: An attacker lies deep inside the internal network for weeks, silently opening up to 128 administrative connection streams (SMB, RDP, WinRM) to move lat 11 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/twinloot-when-microsoft-cloud-becomes-a-hacker-s-control-center?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Aug 20](https://hashnode.com/posts/when-your-computer-becomes-a-secret-transfer-station-for-cyber-spies/6a86c5ef7912ba7456230311) ### [When your computer becomes a secret "transfer station" for cyber spies](https://blog.fiscybersec.com/when-your-computer-becomes-a-secret-transfer-station-for-cyber-spies?utm_source=hashnode&utm_medium=feed) Overview Imagine: an HR employee at an airline company in Pakistan receives an attractive interview invitation from a recruiting brand that seems very familiar. A video call is scheduled. But that "me 8 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/when-your-computer-becomes-a-secret-transfer-station-for-cyber-spies?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Aug 6](https://hashnode.com/posts/medusahvnc-invisible-windows-screen-is-helping-hackers-bypass-all-surveillance-eyes/6a7440da6b7b0906634b2e2f) ### [MedusaHVNC: "Invisible Windows screen" is helping hackers bypass all surveillance eyes](https://blog.fiscybersec.com/medusahvnc-invisible-windows-screen-is-helping-hackers-bypass-all-surveillance-eyes?utm_source=hashnode&utm_medium=feed) What's Going On? Imagine this: you're sitting at your computer, composing emails, surfing the web, opening a bank account to check the balance. Everything is normal. No strange windows pop up. There a 14 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/medusahvnc-invisible-windows-screen-is-helping-hackers-bypass-all-surveillance-eyes?utm_source=hashnode&utm_medium=feed) [dark3v3](https://hashnode.com/@dark3v3) · [Sep 12, 2025](https://hashnode.com/posts/c2-mini-series-empire-to-mimikatz/68c3a41df791dde6c166d31d) ### [C2 Mini Series : Empire to Mimikatz](https://iluvblue.hashnode.dev/c2-mini-series-empire-to-mimikatz?utm_source=hashnode&utm_medium=feed) PowerShell Empire → Mimikatz This blog post will be part of my mini purple team series of deploying and detecting malicious activities using various C2 infrastructures. PowerShell Empire → Mimikatz: M 12 min read · [iluvblue.hashnode.dev](https://iluvblue.hashnode.dev/c2-mini-series-empire-to-mimikatz?utm_source=hashnode&utm_medium=feed)