Adaptix two-tier C2: internal bind listener plus external callback on same host

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•8•0•30

Detects a network relay pattern where a host accepts an inbound internal connection on the Adaptix BeaconTCP default bind port (9000) and correlates it with the same process subsequently establishing outbound connections to public IP addresses over standard web or DNS ports (80, 443, 53).