Sandworm Uses SSH-over-Tor Tunnel for Stealthy Long-Term Persistence

A significant evolution in Sandworm (APT-C-13) tradecraft, revealing the group’s use of SSH-over-Tor tunneling to achieve long-term, covert persistence inside targeted networks. Sandworm, also known as FROZENBARENTS, is a state-sponsored threat group active since 2014. It has consistently targeted government bodies, energy firms, and research institutions, focusing on intelligence collection. The attack begins with spear-phishing […]

The post Sandworm Uses SSH-over-Tor Tunnel for Stealthy Long-Term Persistence appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.