Frequency
3
occurrences
First Seen
April 28, 2026
Last Seen
June 8, 2026
Related Threat Clusters
-
Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian Organizations
Two Russia-aligned cyber campaigns are exploiting the WinRAR vulnerability CVE-2025-8088 against Ukrainian targets nearly a year after it was patched. The flaw, a path traversal vulnerability, allows attackers to write…
19 articles · Updated June 8, 2026 -
Sandworm Leverages SSH-over-Tor for Covert Network Access
Sandworm (APT-C-13), a state-sponsored cyber threat group, has advanced its tactics by employing SSH-over-Tor tunneling to maintain long-term, covert access to targeted networks. This new technique represents a…
2 articles · Updated April 28, 2026
Recent Intelligence Reports
- Sandworm and Turla — cloud.google.com · June 8, 2026
- New Sandworm Tradecraft Uses SSH-over-Tor Tunnel for Long — Cybersecuritynews · April 28, 2026
- Sandworm Uses SSH-over-Tor Tunnel for Stealthy Long — Gbhackers · April 28, 2026