top of page


Join us on Thursday, October 19, 2023, 12:00 noon EST. With an informative Webinar on our continued analysis and tracking of the infrastructure associated with IcedID’s BackConnect (BC) protocol; Originally shared in late December 2022, we will dive into the deployed post-compromise following initial assessments of the value of a victim host, (the use of the BC protocol is of particular interest to us), which remains a priority for our overall tracking of IcedID.



Our Host and S2 Lead, Josh Hopkins will guide us through some of our techniques for tracking emergent C2 infrastructure, often on a timeline whereby identification occurs before victim traffic is observed. What is key to preventing future compromise, threat actor-victim interaction, and eventual data / financial loss.




bottom of page