XWorm Campaign Expands to Three-Channel C2 Fabric Across Offshore ASNs

Two freshly provisioned VPS nodes under separate offshore corporate registrations and a free DDNS hostname have extended the OC_265108 purchase-order campaign's command-and-control architecture since earlier coverage. The operator pre-allocated both ASN blocks months before the campaign activated, signalling deliberate infrastructure planning rather than reactive provisioning.