Tag: remote shell

2 Attack Reports | 0 Vulnerabilities

Attack reports

SHOE RACK: A post-exploitation tool for remote shell access & TCP tunnelling through a victim device

SHOE RACK is a sophisticated malware developed in Go 1.18, designed for post-exploitation activities. It connects to a custom SSH server at a hardcoded C2 URL, enabling remote interaction with the victim device. The malware utilizes DNS-over-HTTPS to locate its C2 server's IP address and has been o…

post-exploitation

Published: June 26, 2025

Downloadable IOCs: 3

Malware Analysis Report: UMBRELLA STAND - Malware targeting Fortinet devices

UMBRELLA STAND is a sophisticated malware targeting FortiGate 100D series firewalls produced by Fortinet. It contains remote shell execution functionality, configurable beacon frequency, and AES-encrypted C2 communications. The malware uses fake TLS on port 443 to beacon to its C2 server and has th…

process injection

defense evasion

Published: June 23, 2025

Downloadable IOCs: 11

Click here to see more Attack Reports