reverse_ssh is an open-source tool used to establish SSH connections to threat actor-controlled infrastructure. It enables outbound connections, bypassing inbound security controls. Its presence on a compromised system, especially with other indicators, is a high-priority red flag.