How to Track a Hacker's Activity

Adrian's team are experts in a particular technique. They monitor a thing called command and control servers. Often, this middleman computer belongs to someone completely innocent who has no idea they've been hacked. In June 2018, Adrian's team identified a command and control server that they're confident is being used by the Lazarus group. It can now watch activity happening on this machine in real time. The researchers suspect an attack is imminent on a bank in India.