CyberSecurityBoardThreat Intel · CVEs · Products
Malware

BridgeHead: WebSocket SOCKS5 Tunnel Proxy

July 28, 2026

BridgeHead is a custom WebSocket-based SOCKS5 tunnel proxy used by Nimbus Manticore. It shares functional overlaps with MiniFast and allows the C2 server to initiate tunnel connections, making the victim machine a relay node for network traffic.