← Security+ glossary

Command and control (C2) C2

The infrastructure of servers and channels through which the attacker remotely controls compromised systems, sends commands and exfiltrates data. The communication is often disguised as legitimate traffic such as HTTPS or DNS queries in order to evade detection.

All Security+ guides →