Tag: tor hidden service

2 Attack Reports | 0 Vulnerabilities

Attack reports

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

APT-C-13 (Sandworm), also known as FROZENBARENTS, is a state-sponsored advanced persistent threat group conducting global cyber espionage targeting government agencies, diplomatic departments, energy enterprises, and research organizations. Recently detected samples reveal the group's use of nested…
sandworm
spear-phishing
scheduled tasks
ssh tunneling
tor hidden service
2026-04-28
covert persistence
frozenbarents
obfs4 obfuscation
Published: April 28, 2026
Downloadable IOCs: 10

Weaponized Military Documents Deliver Advanced SSH-Tor Backdoor

A sophisticated cyber attack targeting the defense sector was identified in October 2025, utilizing a weaponized ZIP archive disguised as a military document. The multi-stage attack employs advanced evasion techniques and deploys a complex infrastructure combining OpenSSH for Windows with a customi…
openssh
defense sector
2025-11-05
tor hidden service
military lure
obfs4
uav operations
ssh-tor backdoor
belarusian air force
Published: November 5, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports