Fake Tech Support Delivers Havoc Command & Control

T1Covered by 1 source · first reported by Huntress at 02 Mar, 15:00 UTC

Adversaries leverage fake tech support to deploy a modified Havoc C2 agent, employing DLL sideloading, syscall evasion (HellsGate), and RMM tools for persistent access.