C2: When Attackers Use Our Weapons Against Us

This Censys report describes how legitimate command-and-control (C2) frameworks used by red teams (Cobalt Strike, Sliver, Covenant, Mythic, PoshC2) are increasingly weaponized by attackers, highlights a June 2022 discovery of Russian hosts running exploitation and C2 tools, and provides fingerprints and Censys search queries (plus ASM detection guidance) to help defenders find and remediate exposed C2 infrastructure.