14-09-2026
BEAR-C2 Did Not Invent Switching. It Just Made the Rebuild Tax Visible. AI Is About to Delete It.
https://albert-corzo.medium.com/bear-c2-did-not-invent-switching-it-just-made-the-rebuild-tax-visible-ai-is-about-to-delete-it-4fa246c64b68
Report completeness: Low
Actors/Campaigns:
Konni
Threats:
Bear-c2
Dead_drop_technique
Cobalt_strike_tool
Reaper
Sesameop
Lamehug_tool
Promptflux
Honestcue
Sliver_c2_tool
Mythic_c2_tool
Havoc
Hexstrike
Villager_tool
Credential_harvesting_technique
Victims:
Enterprise organizations, Tax offices
Geo:
Iranian, Russian, Chinese, North korean
TTPs:
Tactics: 1
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1027, T1036, T1070.003, T1071.001, T1071.004, T1090, T1102.001, T1102.002, T1566, T1567.002, have more...
Soft:
Telegram, Discord, Dropbox, Anthropic, Slack, openai, Hugging Face
Algorithms:
des, aes, rc4, chacha20, xor
Languages:
python
Links:
https://github.com/S3N4T0R-0X0/BEAR-C2