Abusing Bias Part One: Infrastructure

The post examines how building believable social engineering narratives parallels designing covert red team infrastructure, emphasizing creating traffic and artifacts that match expectations. It discusses high-level techniques such as using Cobalt Strike Malleable C2 profiles and HTTP indicators, applying SSL/TLS and web-server rules to appear legitimate, obtaining domain categorization from web-filter vendors, and seeding familiarity to reduce detection—framed as general TTP guidance rather than a specific incident.