Tag: sinkhole

All the articles with the tag "sinkhole".

• Sinkhole, Bursts, and a 142-Minute Retry Timer: Reading C2 Behavior in the Logs

  14 Apr, 2026

  A phishing click led to fixed-size C2 check-ins arriving in two distinct bursts with a 142-minute gap between them. The pattern told the story before we had a verdict.