https://blog.efespain.com/en/tags/infrastructure/A honeypot in some corner of the network. Every infection, a story worth telling.HugoeneFeSpaineFeSpain2026 eFeSpainSun, 01 Nov 2026 12:00:00 +0000https://blog.efespain.com/en/chapter-34/Sun, 01 Nov 2026 12:00:00 +0000https://blog.efespain.com/en/chapter-34/The executor from the last chapter calls a machine I already knew and keeps as a fallback a domain that looks far too much like one that did exist. Pulling on that one-syllable difference brings out its big brother, the previous C2 and the slot it uses to get into its victims. In the end, I asked the other side what it sends.