AdaptixC2 Default HTTP Beacon - Hardcoded Firefox 20 User-Agent

Duo Tech@duotech

•updated Jun 29, 2026•0•0•0

Detects outbound HTTP requests exhibiting a User-Agent string hardcoded to mimic Firefox 20.0 (Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0), which is characteristic of the Adaptix C2 framework. This pattern is commonly used by adversaries for command-and-control communication.