Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

Reported 28 Apr 2026 by otx · Severity: medium

APT-C-13 (Sandworm), also known as FROZENBARENTS, is a state-sponsored advanced persistent threat group conducting global cyber espionage targeting government agencies, diplomatic departments, energy enterprises, and research organizations. Recently detected samples reveal the gr