Tag: cato ctrl

1 Attack Reports | 0 Vulnerabilities

Attack reports

Cato CTRL Threat Research: Suspected China-Linked Threat Actor Targets Global Manufacturer with Undocumented TencShell Malware

In April 2026, Cato CTRL identified and blocked an attempted intrusion against a global manufacturing customer involving TencShell, a previously undocumented, Go-based implant derived from the open-source Rshell C2 framework. The activity appeared in traffic associated with a third-party user conne…
tencent
go
china-linked
2026-05-18
cato ctrl
rshell
tencshell
Published: May 18, 2026
Downloadable IOCs: 52
Click here to see more Attack Reports