Topic

Command and Control Channels

The paths malware uses to reach its operators and receive instructions, and the methods defenders use to detect them.

Current clusters

China-aligned Webworm now routes command and control through Discord and Microsoft Graph

ESET says the group dropped McRat and Trochilus in 2025 and hit government targets in Belgium, Italy, Serbia and Poland. Its two new backdoors call home to Discord and the Microsoft Graph API.

Publishers:welivesecurity.com

Reality

Evidence62
Adoption58
Hype gap+8
Incentives60
Confidence62