NotC2 turns Amazon Bedrock into cloud command-and-control
Original title: NotC2 AI-Powered Hacking Tool Turns Amazon Bedrock Into a Cloud Command-and-Control System
NotC2 PoC uses AWS services and Amazon Bedrock for post-compromise C2 operations without bypassing IAM.
NotC2, a proof-of-concept framework that combines legitimate AWS services with Amazon Bedrock to run post-compromise command-and-control operations. Attackers submit commands to an SQS queue, triggering Lambda execution with SNS delivering results to an external HTTPS endpoint. This relocates infrastructure into managed AWS services while avoiding persistent connections.
- SQS, Lambda, SNS for asynchronous C2
- Bedrock enables natural-language commands
- No IAM bypass or Bedrock vulnerability
Impact: post-compromise command-and-control
From the original article
3 min read at gbhackers.com
NotC2, a proof-of-concept framework that combines legitimate AWS services with Amazon Bedrock to run post-compromise command-and-control operations. Published November 6, the research demonstrates how stolen cloud credentials can enable conversational reconnaissance while command traffic blends into trusted infrastructure. It describes service abuse, not a vulnerability in Bedrock or an initial-access exploit.
By Mayura Kathir · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.