NotC2 AI-Powered Hacking Tool Turns Amazon Bedrock Into a Cloud Command-and-Control System

Varonis researchers have published NotC2, a proof-of-concept framework published on November 6, 2026 that uses stolen cloud credentials and legitimate AWS services — SQS, Lambda and SNS — for post-compromise command and control, with Amazon Bedrock providing a natural-language interface for reconnaissance such as listing EC2 instances. The research describes abuse of trusted services rather than a vulnerability in Bedrock, and Varonis recommends strict IAM least privilege and monitoring of CloudTrail, Lambda, SNS and Bedrock logs.