Adversary C2 Infrastructures Tracked in 2023

Sekoia.io’s 2023 C2 Trackers report details extensive tracking of adversary command-and-control infrastructure—over 85,000 C2 IPs—highlighting active malware campaigns (Stealc, Lumma, Vidar, Raccoon), the rise of phishing-as-a-service (EvilProxy, NakedPages) that enable MFA-relay attacks, malvertising and fake-update/drive-by frameworks (ClearFake), and DDoS activity by NoName057(16); the report focuses on trends, IoCs, and evolving TTPs used by cybercriminals and hacktivists throughout 2023.