Skip to content
Briefings are running a touch slower this week while we rebuild the foundations.See roadmap
Timeline

EarthWorm

Open-source SOCKS5 tunnel tool used by CL-STA-1132 for C2 masking on PAN-OS firewalls.

1 of 1 entries (1 events, 0 interactions)

Filters
#316 Apr

Deployed by CL-STA-1132 for lateral movement and C2 masking

Cybersecurity: Threats and Defences: CL-STA-1132 exploited PAN-OS since 16 April, log destruction confirmed
← Back to EarthWorm