Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials. Ordinary stuff, until one move near the end. Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim's machine, building a way back in that did not run through the C2 at all. When the Havoc server went offline the next
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
TN

The Hacker News

1h ago
0 0

Discussion

Don’t hold back—comment!

Don’t wait—start sharing your ideas now!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensi…

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capab…
Giulia

Giulia

1h ago
0
bleepingcomputer.com
India's Telegram ban hit the UAE too. Here's how to get around …

India has banned Telegram until June 22 after the app was used to circulate leaked exam papers. CEO Pavel Durov accuses telecom Reliance of BGP hijacking that…
Giulia

Giulia

2h ago
0
thehackernews.com
The Top 10 Attack Surface Exposures in 2026

Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerabilit…
TN

The Hacker News

4h ago
0
bleepingcomputer.com
Malicious JetBrains Marketplace plugins steal AI API keys from …

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [. .. ]
Rosa Martinez

Rosa Martinez

13h ago
0
darkreading.com
Fileless Phantom Stealer Targets Browser Credentials

In addition to executing entirely in memory, the malware's infection chain incorporates other anti-analysis techniques designed to frustrate detection.
DR

Dark Reading

17h ago
0
thehackernews.com
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads vi…

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload and…
TN

The Hacker News

20h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensi…

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capab…
Giulia

Giulia

1h ago
0
thehackernews.com
The Top 10 Attack Surface Exposures in 2026

Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerabilit…
TN

The Hacker News

4h ago
0
thehackernews.com
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads vi…

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload and…
TN

The Hacker News

20h ago
0
thehackernews.com
New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypt…

Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 banking and cryptocurrency apps a…
TN

The Hacker News

1d ago
0
thehackernews.com
Survey: 94% of Incidents Involve Anonymized Infrastructure. Tea…

Security teams have never had more IP data at their disposal. Every day, analysts ingest enrichment feeds, geolocation data, reputation scores, telemetry, and…
TN

The Hacker News

1d ago
0
thehackernews.com
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patche…

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on…
TN

The Hacker News

1d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest