TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8698
@thehackernews
The Hacker News
Post content
Post content
🛑 A Russian-linked toolkit is spreading through fake Windows shortcut files disguised as private key folders. CTRL hides activity through RDP tunnels and local pipes, avoiding standard C2 traffic and reducing network detection signals. 🔗 Read → https://thehackernews.com/2026/03/russian-ctrl-toolkit-delivered-via.html