The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years

The malware TTP and their capabilities remain the same observed in 2019, but the trojan loader – the VBS files – propagated along with the new campaign has significant differences.