From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion
#bishopfox

Forking an existing C2 agent sounds faster than building from scratch. Bishop Fox learned otherwise. This post documents what happened when they forked Apollo, built a custom obfuscation pipeline to defeat EDR detection, and spent months fighting an architecture that was never designed for it.

via BishopFox Blog