Tag: ssh tunnel

1 Attack Reports | 0 Vulnerabilities

Attack reports

TookPS distributed under the guise of UltraViewer, AutoCAD, and Ableton

A malware campaign is distributing the TookPS downloader by impersonating popular software like UltraViewer, AutoCAD, SketchUp, Ableton, and Quicken. The malware establishes an SSH tunnel for remote access and deploys additional payloads like TeviRat and Lapmon backdoors. The attackers gain full sy…
backdoor
remote access
downloader
2025-04-03
tookps
lapmon
ssh tunnel
tevirat
software impersonation
Published: April 3, 2025
Downloadable IOCs: 17
Click here to see more Attack Reports