Bidirectional Web Service Communication

Use an existing, legitimate Internet-hosted web service as a bidirectional command-and-control channel: an implant on a compromised system retrieves instructions through the service and returns command output through service-specific content or APIs. The implementation depends on the selected service and its authentication and API behavior; ordinary HTTPS or a generic tunnel alone does not establish this technique.