Skip to content
Threat Feed
Subscribe

Tag

Elastic-Detection-Rule

1 brief RSS
medium advisory

Detecting Potential ICMP Tunneling Activity for Covert C2 and Exfiltration

This brief describes a critical network threat where attackers leverage ICMP tunneling, a technique to embed command and control (C2) or exfiltrated data within large ICMP Echo payloads, enabling covert communication channels that bypass traditional firewall rules, posing a significant risk of data theft and unauthorized system control.

network-security command-and-control data-exfiltration icmp-tunneling elastic-detection-rule
1r 2t