canva-c2

Canva-C2 is a cybersecurity research tool that illustrates the potential exploitation of Canva's document embed feature for Command-and-Control (C2) communication, enabling covert information exchange between a client and a controller. It focuses on the challenges of detecting malicious traffic that masquerades as legitimate cloud service usage, and provides a proof-of-concept for researchers to explore configurations that utilize Telegram and Slack for data exfiltration. Notably, it addresses modern threats from trusted SaaS platforms and offers insights into defensive detection strategies.