Tag: hazybeacon

1 Attack Reports | 0 Vulnerabilities

Attack reports

Behind the Clouds: Attackers Targeting Governments in Southeast Asia Implement Novel Covert C2 Communication

A cluster of suspicious activity, tracked as CL-STA-1020, has been targeting governmental entities in Southeast Asia since late 2024. The threat actors have developed a new Windows backdoor called HazyBeacon, which uses AWS Lambda URLs for command and control communication. This technique leverages…
dropbox
dll sideloading
google drive
2025-07-14
governmental entities
hazybeacon
Published: July 14, 2025
Downloadable IOCs: 7
Click here to see more Attack Reports