Leveraging Hyperhost VPS and Proton VPN exit nodes to access webshells on internet-facing systems. Receiving C2 instructions from user profiles created by the adversary on legitimate websites/forums such as Github and Microsoft's TechNet portal