XTunnelMalware
- shunnael
- trojan.shunnael
- X-Tunnel
- xaps
X-Tunnel is a network proxy tool that implements a custom network protocol encapsulated in the TLS protocol.From MISP Galaxy
Last reported 4 months ago, by Sekoia.io1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1056.001Keylogging
“The toolkit was unchanged: X-Agent for keylogging and screenshotting, X-Tunnel for exfiltration, Mimikatz for credential theft.”
- T1059.009Cloud API
“On the highest-priority targets, APT28 escalates to BeardShell, a custom C++ backdoor that uses the icedrive cloud API for C2.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
APT28: An Evolution of Tradecraft from X-Agent to LLM Malware“The X-Agent and X-Tunnel implants defined its highest-profile breaches, including TV5Monde, the Bundestag and the 2016 US election.”
Thanks — we review every report.