NotC2 turns AWS services into a proof-of-concept C2 chain
Varonis Threat Labs built NotC2 as a proof-of-concept command-and-control framework that runs entirely on native AWS services. It uses Amazon Bedrock to turn plain English into cloud commands, and it depends on an attacker already having AWS credentials. Service abuse inside AWS NotC2 is described as service abuse rather than a flaw in Bedrock. The framework only works after stolen or otherwise obtained AWS credentials are already in hand, so…