https://intel.breakglass.tech/post/hunting-smokeloader-s-insureflow-pro-unmasking-a-dual-family-c2-operation-with-raft-protocol-obfuscation
Hunting SmokeLoader's "InsureFlow Pro": Unmasking a Dual-Family C2 Operation with Raft Protocol...
We identified and mapped a live SmokeLoader and Fuery botnet operation run by a single operator ("ingermany") using a custom Flask-based C2 panel disguised as...
dual familyraft protocolhuntingunmaskingoperation