Command & Control Server (C&C)

A command-and-control server is a computer controlled by an attacker or cybercriminal used to send commands to systems compromised by malware and receive stolen data. Malware delivered via phishing often establishes a connection back to a C&C server. Understanding this helps illustrate the consequences of a successful phishing attack beyond the initial click.