“Using weird protocols” for C&C is old hat for hackers tbh. Well over a decade ago after reading an RFC I switched all my backdoors to use SCTP - a protocol man

“Using weird protocols” for C&C is old hat for hackers tbh. Well over a decade ago after reading an RFC I switched all my backdoors to use SCTP - a protocol many of my peers had never fucking heard of - and found it evaded a shit tonne of IDS/firewall products.