# C2 Evolution From the Past to Tomorrow — Xavier Mertens

**URL:** <https://discourse.ossbase.org/t/c2-evolution-from-the-past-to-tomorrow-xavier-mertens/1207>\
**Category:** 2025 talks / workshops\
**Tags:** talk, hack.lu, 2026\
**Created:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/c2-evolution-from-the-past-to-tomorrow-xavier-mertens/1207 "2026-10-07T08:52:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://discourse.ossbase.org/uploads/default/original/1X/4713f3d4fec85f7513775fc2dd36f548a49f8faa.jpeg) [@system](https://discourse.ossbase.org/u/system)\
**Post date:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/c2-evolution-from-the-past-to-tomorrow-xavier-mertens/1207/1 "2026-10-07T08:52:41Z")

</div>

**Join us at hack.lu 2026 — [Info & Registration](https://2026.hack.lu/info/)**

**Duration:** 30 min  
  
**Type:** Talk  
  
**Speakers:** Xavier Mertens

**Abstract**

Since malware evolved with time, they established communications with a server to work smoothly. Most of them always used the gold old “client/server” model. Before diving into the malware ecosystem, I’ll explain why threat actors just reused communications channels that we have for thousands of years. Their goal remains the same except that, today, bits and bytes are used.  
That’s the basics of a botnet where we have “bots” waiting for commands from their master. I’ll provide a recap of the C2 protocols from the past to today and… tomorrow? To show you common tactics used by attackers to interact with the infected computers.

**Description**

The talk is divided in two parts. First, I’ll recap what are communications from animals to humans and how they are used. Then, the same will be applied to the malware ecosystem.

[View on pretalx](https://pretalx.com/hack-lu-2026/talk/WRTWTK/)