Tool
Microsoft dev tunnels
- First Reported
- Dec 10, 2025
- Latest Reported
- Dec 10, 2025
Reported Context (1)
- APT31 also used Microsoft dev tunnels for traffic tunneling, via the Microsoft-signed file devtunnel.exe. The attackers combined this tool with the LocalPlugx malware, which listened for commands on a specific port. APT31 Targeted Russian IT Firms With New Malware and Cloud-Based C2
Malware (11)
People (2)
Threat Actors (2)
MITRE ATT&CK (51)
Vendors (3)
Products (11)
Tools (16)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.