Network Connection to AWS Lambda URL for C2

Georg Lauenstein@gsec

•updated Mar 16, 2026•1•0•90

Detects outbound network connections to AWS Lambda function URLs which may indicate HazyBeacon backdoor or similar cloud-based C2