Advertisement
HIGH
Threat Intel
Junior Hacker's Tailscale & OpenSSH Post-C2 Persistence
Analysis of a junior hacker's TTPs, leveraging Tailscale and OpenSSH for persistent access to a French automotive business after their Havoc C2 server went offline.
Runtime Rebel Intel
4 min read·Jun 17, 2026
HIGH
Threat Intel
Fake IT Support Campaigns Deploy Customized Havoc C2 Payloads
Huntress identifies a new campaign using fake IT support lures and vishing to deploy Havoc C2 for data exfiltration and ransomware delivery.
Runtime Rebel Intel
4 min read·Mar 3, 2026