REF8747

REF8747 group deploys BITSLOTH backdoor using Windows BITS for C2

1. Executive summary Elastic Security Labs has documented BITSLOTH, a Windows backdoor that uses the Background Intelligent Transfer Service (BITS) for command-and-control, found on