Security News > 2022 > August > Dark Utilities C2 as a service tool leverages IPFS, targets several operating systems

Dark Utilities C2 as a service tool leverages IPFS, targets several operating systems
2022-08-10 14:53

Figure A. Dark Utilities provides code which needs to be executed on a target's system, which means the attacker needs to have already compromised the system and have access to it.

The documentation provided by the platform provides guidance for conducting reconnaissance and identifying/exploiting vulnerabilities to infect servers that can be added to Dark Utilities.

Of course, it is possible for an attacker without particular skills to buy compromised systems access from the cybercrime underground and use Dark Utilities with it.

Two types of Distributed Denial of Service attacks are possible using the Dark Utilities: Layer 4, which supports TCP/UDP/ICMP network protocols, as well as some other protocols specifically designed for several gaming platforms such as Teamspeak3, Fivem, Gmod, Valve and some video games.

Figure C. Dark Utilities also provides a way to launch commands on multiple systems in a distributed way, and provides a Discord grabber.

The current version of Dark Utilities allows attackers to launch payloads on several different operating systems: Linux, Windows and Python-based implementation.


News URL

https://www.techrepublic.com/article/dark-utilities-c2-as-a-service-tool-leverages-ipfs-targets-several-operating-systems/