logoalt Hacker News

grueztoday at 12:10 AM1 replyview on HN

You would be a dumbass to do that, because virustotal allows security researchers to see submitted samples/urls. The last thing you want to do is to draw attention to your C&C server.


Replies

wyldberrytoday at 2:33 AM

It's not uncommon to use VT and other sandbox tools as a proxy indicator for if your attacks have tripped defenders and tooling.