Cybersecurity definition
What is C2?
C2 stands for Command and Control.
By Cyber Tool Stack Editorial TeamUpdated
Definition
The infrastructure and channel an attacker uses to remotely control malware already running on a compromised system — issuing commands, exfiltrating data, or pulling down additional tools.
Where C2 fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
SandboxAn isolated environment where a suspicious file or link can be opened and observed safely, revealing what it actually does — dropping malware, calling out to a remote server — without risking the real network.Lateral MovementThe stage of an attack where, after gaining an initial foothold, an intruder moves from system to system inside a network to reach more valuable targets, often using stolen credentials rather than new exploits.BotnetA network of compromised devices, controlled remotely by an attacker through command-and-control infrastructure, used collectively to launch DDoS attacks, send spam, or carry out other automated abuse at scale.