Bitwarden’s Icon Proxy Can Turn Its CDN Into a Stealthy C2 Channel
Researchers built a bidirectional command‑and‑control channel through Bitwarden’s icon proxy, embedding commands in PNG metadata and exfiltrating results via DNS lookups. The technique works without a Bitwarden account, leveraging trusted Azure infrastructure to hide malicious traffic.