Unc6240 Shinyhunter Neoregeorg Tunnel Jsp Socks Proxy

Arnold Chan@slaz

•updated 9 days ago•0•0•1

Detects Neo-reGeorg tunnel.jsp/tunnel.jspx servlets used by UNC6240 to establish SOCKS5-over-HTTP(S) tunneling from compromised PeopleSoft PSEMHUB.war hosts