The botmaster logs into the C2 panel. This dashboard typically shows the number of active bots, their geographic locations, and their device types.
After months of investigation, a coalition of law enforcement agencies and cybersecurity firms launched a coordinated effort to dismantle Erebus. The operators were forced to abandon their infrastructure, and the panel was eventually shut down. However, the legacy of Erebus lived on, as its code and business model inspired new C2 panels to emerge.
Enterprise firewalls should look for bots "phoning home." Signs include: