Iran-linked threat actor Tortoiseshell is expanding its espionage toolkit with reverse SSH tunneling utilities and a TWOSTROKE-like backdoor designed to give operators covert, durable access to compromised internal networks. The research began with public reporting from Kaspersky on Mirage Kitten’s newer malware ecosystem, which included the NightLedger backdoor and WebSocket tunneling tools ArcBridge and BridgeHead. […]
The post Iran-Linked Hackers Use Reverse SSH Tunnels to Reach Deep Inside Compromised Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.