Grey Noise Intelligence Introduces C2 Detection to Close the Visibility Gap at the Edge of the Network

Summary: GreyNoise Intelligence announced C2 Detection on April 7, 2026, an intelligence module that matches outbound network traffic logs against a continuously updated dataset of confirmed malware-hosting IPs and Command and Control infrastructure to flag active compromise. The company says its deception network of over 5,000 sensors in 80 countries supports the product, which surfaces malware hashes and family classifications tied to confirmed callback infrastructure.
What you should know: GreyNoise's research states that millions of edge devices are already infected and silently calling out to malware-hosting servers and C2 nodes - assets where EDR cannot run and native telemetry is often too sparse to catch callback behavior.

Read the original at GreyNoise Blog ↗