CVE-2024-6387: OpenSSH Vulnerability Exploited in APT36 Campaign
CVE-2024-6387 is a critical vulnerability in OpenSSH that was exploited by APT36 in their campaign targeting Afghan telecom and Indian critical infrastructure.…
Tag: OpenSSH
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
OpenSSH: Secure Shell Connectivity Tool
OpenSSH is a suite of secure networking utilities that was backdoored by Velvet Ant to log credentials and commands, with a hidden…
Junior Hacker Used Tailscale and OpenSSH to Maintain Persistent Access After C2 Outage
A French-speaking attacker, operating under the handle 'Poisson,' breached a small French automotive business using a keylogger to steal banking and email…
OpenSSH Server: Secure Shell Server Installed on Workstation
OpenSSH Server was installed on a Windows workstation by the attacker to enable key-based SSH access and reverse tunnels, providing a backdoor…
OpenSSH — Cybersecurity company profile
OpenSSH was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…