Submit abuse reports to the C2 panel's hosting provider. If the panel is on AWS, a single abuse report can kill the instance. Use tools like Shodan to find exposed C2 panels (many run with default SSL certificates or favicons that fingerprint them).
C2 panels now feature integrated ransom notes. After launching a 100 Gbps test attack, the panel displays a Bitcoin address and countdown timer. No decryption—just extortion. c2 ddos panel