[Update] spotify — new C2 project / detection rule

[ppuriin]

Service

spotify

Type of contribution

• [/ ] New C2 project link
• New detection rule
• Fix / update existing info
• New description or documentation

Details

Custom havoc agent integration of utilizing Spotify as a communications channel. Source code and deep dive is in the blog link.

Project URL:
https://ppurin.me/the-art-of-c2-tradecraft-in-legitimate-services/

Detection rule(s):
*.spclient.spotify.com

Additional context:
n/a