Tag: covert persistence

1 Attack Reports | 0 Vulnerabilities

Attack reports

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

APT-C-13 (Sandworm), also known as FROZENBARENTS, is a state-sponsored advanced persistent threat group conducting global cyber espionage targeting government agencies, diplomatic departments, energy enterprises, and research organizations. Recently detected samples reveal the group's use of nested…
sandworm
spear-phishing
scheduled tasks
ssh tunneling
tor hidden service
2026-04-28
covert persistence
frozenbarents
obfs4 obfuscation
Published: April 28, 2026
Downloadable IOCs: 10
Click here to see more Attack Reports