Cybersecurity · 54 views
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
Cato Networks tracked Poisson using OpenSSH and Tailscale to maintain access after Havoc C2 outage in a 33-day intrusion.
Summary
A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials. Ordinary stuff, until one move near the end. Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim's machine, building a way back in that did not run through the C2 at all.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016Continue reading
- State Bank of India Suffers a Customer PII Data LeakContinue reading
- PHP2Shell exposes the weakness in coordinated vulnerability disclosureContinue reading
- Railway warns devs to rotate secrets after potential breachContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow