Baget | Exploit 2021

Baget’s generated RATs used Domain Generation Algorithms (DGAs) and TLS encryption to blend with normal web traffic. Many network detection systems failed to flag encrypted C2 traffic on port 443.