Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:amazon:aws_iot_secure_tunneling:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Abuse of AWS IoT Secure Tunneling Localproxy for Post-Exploitation C2

Adversaries are abusing the legitimate AWS IoT Secure Tunneling localproxy binary in destination mode to establish unauthorized remote access tunnels through AWS-managed infrastructure.

AWS IoT Secure Tunneling aws-iot command-and-control tunneling post-exploitation
3t 1i