Automated SSH Lateral Movement via sshpass

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•7

Monitors for the use of 'sshpass' to automate SSH logins using specific accounts commonly associated with Oracle/PeopleSoft administration (psoft, oracle, linuxadm). This technique was observed in ShinyHunters attacks.