hxxps
AYCH-tee-pee-pee-ESS
Definition
A stylized, obfuscated version of the 'https' prefix, used in technical documentation and threat intelligence to prevent automated security tools or browsers from clicking on or hyperlinking potentially malicious URLs.
Etymology
This is a form of 'defanging,' a common cybersecurity practice originating from the need to share malicious indicators safely; by replacing the 't' in 'https' with 'x', the string becomes harmless while remaining recognizable to human experts.
In the news
In this article, 'hxxps' is used to neutralize URLs within the text, ensuring that researchers can share indicators of compromise—such as C2 domains—without inadvertently creating active links that could be clicked by security analysts or filtered by web crawlers.
The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications
Read the full article ↗Unit 42