Go2Tunnel

Reported Context (3)

The threat actor’s arsenal includes modular remote access trojans (RATs) and information stealers, including the Python-based BusySnake Stealer, and tools like Go2Tunnel for remote access and network tunneling. Armored Likho APT Uses BusySnake Stealer in Espionage Operations
Its toolkit includes obfuscated RATs, BusySnake Stealer, AquilaRAT, and Go2Tunnel, with attacks delivered through spear-phishing, GitHub-hosted payloads, and abused Windows shortcut chains. Armored Likho Targets Government and Power Sectors with BusySnake Stealer
#ArmoredLikho Researchers Detail Armored Likho’s BusySnake Stealer Campaign

CVE (1)

Malware (2)

Threat Actors (2)

MITRE ATT&CK (22)

Vendors (4)

Products (9)

Tools (1)

Industries (3)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.