Backdoor

Windows

Pen testing

Covenant

Covenant

Covenant is a .NET-based command-and-control (C2) framework used in penetration testing and offensive operations. It supports GUI, API, and plugin-driven exploitation.

Known Variants

Known Variants

No major variants reported but widely adapted by attackers for stealth and persistence.

No major variants reported but widely adapted by attackers for stealth and persistence.

Mitigation Strategies

Mitigation Strategies

Block unauthorized access to C2 frameworks, monitor network traffic for C2 communications, and enforce strong access controls.

Targeted Industries or Sectors

Targeted Industries or Sectors

Frequently used in enterprise environments for both legitimate and malicious purposes.

Frequently used in enterprise environments for both legitimate and malicious purposes.

Associated Threat Actors

Associated Threat Actors

Exploited by ethical hackers and cybercriminals for advanced operations.

Exploited by ethical hackers and cybercriminals for advanced operations.

References