Tool
CrossC2
- First Reported
- Mar 26, 2026
- Latest Reported
- Mar 27, 2026
Reported Context (2)
- Post-exploitation tools include CrossC2, Sliver, TinyShell, keyloggers, and brute-force utilities for credential harvesting and lateral movement. Red Menshen Campaign Uses BPFDoor Implants for Telecom Espionage
- At the next step, the hackers deployed Linux beacon frameworks such as CrossC2, a Cobalt Strike-derived beacon often used by Chinese APTs for staging, command execution, and lateral movement. Rapid7 Reports China-Linked Operators Embedded Backdoors in Telecom Infrastructure
Malware (2)
Threat Actors (6)
MITRE ATT&CK (12)
Vendors (6)
Products (4)
Tools (3)
Industries (2)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.