Open C2 Panel Reveals Auraboros RAT Audio Streaming and Keylogging Features

Cybersecurity researchers discovered 'Auraboros C2', a previously undocumented command-and-control framework and accompanying Windows remote access trojan that performs live audio and webcam streaming, keystroke logging, browser credential/cookie theft (via DPAPI decryption), and session hijacking through a reverse SOCKS5 proxy. The implant uses DLL sideloading and maintains persistent Socket.io connections; however, the C2 dashboard and APIs are exposed over plain HTTP without authentication or session isolation, providing wide-open access to stolen data and operational controls.