1. A computerized method, comprising: intercepting an incoming message from a remote source directed to an endpoint device, the incoming message is in response to a callback message sent from malware operating on the endpoint device; overwriting a first portion of information within the incoming message with a second portion of information including a neutralized version of at least a portion of the malware and the second portion of information includes at least (a) a callback identifier including an address of a destination device operating as a Command and Control (CnC) server or (b) a callback time used by the malware to determine when to attempt a subsequent communication with the destination device; and forwarding the incoming message including the second portion of the information to the endpoint device.