Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

Summary

A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials. Ordinary stuff, until one move near the end. Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim's machine, building a way back in that did not run through the C2 at all. When the Havoc server went offline the next

News Radar provides aggregated summaries. Full content and copyright remain with the original publisher.