Malware
CowTunnel
- First Reported
- Dec 10, 2025
- Latest Reported
- Dec 10, 2025
Reported Context (1)
- cryptominer malware, a Linux backdoor we're tracking as PeerBlight, a reverse proxy tunnel we call CowTunnel, and a Go-based post-exploitation implant dubbed ZinFoq as part of their post-exploitation activity. Huntress Details React2Shell Exploitation and Linux Malware
CVE (2)
Malware (7)
People (5)
MITRE ATT&CK (15)
Vendors (2)
Products (5)
Tools (3)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.