Cisco Talos recently discovered a new server hosting a large stockpile of malicious files. Talos identified at least two targets based on screenshots and memory dumps. The data found on this server shows how malicious actors diversify their activities to target different organizations and individuals, while still using the same infrastructure. The TinyPOS, DoppelPaymer and TinyPOS samples were found on the server. The files include ransomware, credit card capture malware and some loaders that execute code delivered directly from command and control (C2)”]
Source: https://blog.talosintelligence.com/2019/11/c2-with-it-all.html