Tag: ssh-bruteforce

All the articles with the tag "ssh-bruteforce".

• TORA Week in Review — Apr 6–10, 2026

  

  10 Apr, 2026

  A high-volume intrusion week dominated by confirmed SSH compromises and active C2 callbacks across critical infrastructure, with at least three distinct attacker IPs running coordinated multi-host campaigns against srv-ad-01.corp.local and srv-db-staging.corp.local. Fifteen P1 escalations, zero P2 or P3, and a persistent CMDB gap in 10.10.6.200 that blocked triage across four cases.

• TORA Week in Review — Mar 30–Apr 3, 2026

  

  3 Apr, 2026

  A high-tempo week dominated by active C2 resolutions and confirmed SSH-to-C2 pivot chains across production and staging infrastructure, with BlackCat ransomware and QakBot emerging as the primary threat families. Twelve P1 escalations and four confirmed SSH brute-force successes define the shape of the week.