Middle East C2 Infrastructure Campaign Identified | MSSP Advisory

Hunt.io identified over 1,350 command and control servers across 98 providers in 14 Middle Eastern countries, with Saudi Telecom Company hosting 72% of this malicious infrastructure through compromised customer systems. The report reveals a concentrated regional threat landscape where legitimate telecom infrastructure is being weaponized for C2 operations.

Your RMM and PSA tools connecting to international endpoints could be routing through compromised Middle Eastern infrastructure without your knowledge, potentially exposing your management channels to interception. Clients with global operations or Middle Eastern business partnerships face direct exposure to well-established C2 networks that have proven staying power.

📬