Boggy Serpens C2 Communication via HTTP Status Codes

Elgonad .@elgonad

•updated Mar 17, 2026•2•0•86

Detects C2 communication from Boggy Serpens (MuddyWater) backdoors like Nuso and BlackBeard, which use non-standard HTTP status codes (201, 202, 418) to receive commands from known C2 servers.