#SOCKSProxy
LightNews LightNews
securityonline.bsky.social
An exposed workspace shows AhsayCBS webshell access turned into SOCKS proxy tunnels with Chisel and GOST across 141 hosts, per the logs.

#AhsayCBS #Webshell #SOCKSProxy #Chisel #GOST #MSP #ThreatMon #Cybersecurity
Exposed Workspace Shows AhsayCBS Webshells Turned Into SOCKS Proxy Tunnels
TL;DR ThreatMon recovered an exposed attacker workspace with 1,357 files that track AhsayCBS webshell access. Of 189 webshell probes, 134 got live responses. The operator's tools then tried to turn that access into SOCKS proxy tunnels routed through a shared VPS. What happened AhsayCBS is a backup management platform that many managed service providers use. In October 2026, researchers reported CVE-2026-105133 and CVE-2026-105134.
securityonline.info
October 30, 2026 at 1:06 AM
securityonline.bsky.social
An exposed workspace shows AhsayCBS webshell access turned into SOCKS proxy tunnels with Chisel and GOST across 141 hosts, per the logs.

#AhsayCBS #Webshell #SOCKSProxy #Chisel #GOST #MSP #ThreatMon #Cybersecurity
Exposed Workspace Shows AhsayCBS Webshells Turned Into SOCKS Proxy Tunnels
TL;DR ThreatMon recovered an exposed attacker workspace with 1,357 files that track AhsayCBS webshell access. Of 189 webshell probes, 134 got live responses. The operator's tools then tried to turn that access into SOCKS proxy tunnels routed through a shared VPS. What happened AhsayCBS is a backup management platform that many managed service providers use. In October 2026, researchers reported CVE-2026-105133 and CVE-2026-105134.
securityonline.info
October 30, 2026 at 1:06 AM
lucsebastian.bsky.social
Alguien recuerda esto?
*** Checking WinGate/SocksProxy security...
Identd connection established
Identd sending infoIdentd sending info
Identd closed
***PING 998844066
-*NiCK*- *** Protecci—n IP: tu direcci—n virtual es Bfl1po.CYIXJH.virtual
***Welcome to the Internet Relay Network xxxxxx
July 12, 2025 at 3:45 PM
hugovalters.bsky.social
Your segmentation fails when a SOCKS proxy and MS17-010 pivot deeper. Assume breach. #NetworkSecurity #LateralMovement #SOCKSProxy

Intel: https://www.valtersit.com/vault/2026/04/metasploit_framework_exploits/pivot-via-socks-proxy-for-internal-exploitation-8e6b8d/
April 14, 2026 at 1:30 AM
reconbee.bsky.social
New Chaos Variant Targets Misconfigured Cloud Deployments Adds SOCKS Proxy reconbee.com/new-chaos-va...

#chaos #cloud #SOCKSproxy #proxy #cybersecurity #cyberattack
New Chaos Variant Targets Misconfigured Cloud Deployments Adds SOCKS Proxy
incorrectly configured Docker instances read more about New Chaos Variant Targets Misconfigured Cloud Deployments Adds SOCKS Proxy
reconbee.com
April 9, 2026 at 7:37 AM