Cloudflare Quick Tunnel is a tool tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.
Cloudflare Quick Tunnel is a tool tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed August 4, 2026; most recent activity August 4, 2026.
The Smoke#Screen campaign exploits social engineering tactics to install the legitimate ScreenConnect RMM tool on compromised systems, providing attackers with remote access. Targeting both Windows and macOS, the…
Cloudflare Quick Tunnel is a tool tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.
The most recent intelligence report mentioning Cloudflare Quick Tunnel on ThreatCluster is dated August 4, 2026.
Across ThreatCluster reporting, Cloudflare Quick Tunnel most frequently co-occurs with Malware, Phishing, Smoke#screen, ConnectWise, T1059.001 - PowerShell, among 12 tracked related entities.
The most significant recent cluster is “Smoke#Screen Campaign Uses Fake Updates to Install Remote Access Tool” (4 articles · Updated August 4, 2026). Cloudflare Quick Tunnel appears across 1 threat cluster in total, listed above with sources.
Cloudflare Quick Tunnel appears in 2 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.