Dancing the night away with named pipes - PIPEDANCE client release

Elastic Security Labs presents PIPEDANCE, a custom malware family attributed to a state-sponsored actor that uses named pipes for command-and-control and supports lateral movement, process injection, and reconnaissance. The report accompanies a released client tool and walkthrough to emulate PIPEDANCE behaviors for defensive research, including setup instructions and an appendix of handler commands.