Tag: dns over https

2 Attack Reports | 0 Vulnerabilities

Attack reports

SHOE RACK: A post-exploitation tool for remote shell access & TCP tunnelling through a victim device

SHOE RACK is a sophisticated malware developed in Go 1.18, designed for post-exploitation activities. It connects to a custom SSH server at a hardcoded C2 URL, enabling remote interaction with the victim device. The malware utilizes DNS-over-HTTPS to locate its C2 server's IP address and has been o…

post-exploitation

Published: June 26, 2025

Downloadable IOCs: 3

Updated Shadowpad Malware Leads to Ransomware Deployment

A recent investigation revealed Shadowpad malware being used to deploy a new ransomware family in Europe. The threat actor targeted 21 companies across 15 countries, primarily in the manufacturing sector. Access was gained through remote network attacks, exploiting weak passwords and bypassing mult…

multi-factor authentication bypass

remote network attacks

intellectual property theft

Published: February 20, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports