Using Slack links-preview to smuggle C2 in locked-down environments.

(even when Slack traffic is restricted to your corporate workspace) - Detecting and blocking anomalous web requests has become trivial for Blue Teams, and if you are on a red team engagement, an implant pinging constantly to mybrandnewdomain-about-cooking.lol will not fly nowadays. Using External C2 has become one of the more...