article thumbnail

APT34: Glimpse project

Security Affairs

The command and control is implemented by a standalone.NET application working through files. The backend, a nodeJS server, runs and offers Public API and and saves, requests to agents, and results from agents, directly into files named with “UID-IP” convention acting as agent ID.