The global socket: how threat actors are weaponizing GSocket for stealthy C2

Published 2026-11-11T19:49:57Z•f3f53ef63df395cce8f6906f3e801613ed14253d92ec190e07e3e21db227112a

Source metadata

Publication date
2026-11-11T19:49:57Z
Source identifier
https://www.microsoft.com/en-us/security/blog/?p=150921
Public record ID
record:sha256:f3f53ef63df395cce8f6906f3e801613ed14253d92ec190e07e3e21db227112a

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
microsoft_security_blog
Record identifier
f3f53ef63df395cce8f6906f3e801613ed14253d92ec190e07e3e21db227112a
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.

Record · The global socket: how threat actors are weaponizing GSocket for stealthy C2 · Baitaphish