Data by Hatching Triage opens in a new tab

Distribution is the other half: the hosts that hand over the payload in the first place. They rarely sit on the same networks as the command-and-control addresses, and some families turn up here and nowhere else, so they are counted on their own rather than folded into the C2 figures.