Threat Intelligence Report

The global socket: how threat actors are weaponizing GSocket for stealthy C2

📅 November 12, 2026 📰 www.microsoft.com 🔍 1 CVE(s) referenced

Threat actors are increasingly weaponizing GSocket’s shared relay network to establish stealthy, persistent command-and-control on compromised Linux servers that survives vulnerability patching and evades traditional IP- and domain-based blocking.

vendor

CVE-2026-43284

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle