Definition
Command and control C2 refers to the infrastructure and communication channels used by malicious actors to remotely direct and manage compromised systems or botnets. This network allows attackers to issue commands, exfiltrate data, and coordinate attacks across multiple infected devices. Understanding C2 is crucial for defenders to identify, disrupt, and mitigate ongoing cyber threats. For instance, a botnet might receive instructions via a C2 server to launch a distributed denial of service DDoS attack against a target organization. It is distinct from legitimate remote administration tools, which are used for authorized system management. C2 concepts are foundational in cybersecurity certifications like CompTIA Security+ and CySA+.