Skip to content
Threat Feed
Subscribe

Product

Plink

1 brief RSS
low advisory

Detection of SSH Reverse Port Forwarding on Windows

Adversaries are abusing native Windows OpenSSH and Plink binaries to establish unauthorized reverse SSH tunnels, bypassing inbound connectivity controls for C2 and lateral movement.

OpenSSH +1 command-and-control lateral-movement proxy tunneling windows
1r 3t