Skip to content
MalwareWiki

Malware

XTunnel

aka Shunnael · X-Tunnel · xaps

X-Tunnel is a network proxy tool that implements a custom network protocol encapsulated in the TLS protocol.

XTunnel, also known as Shunnael, X-Tunnel, xaps, is a Windows malware family operated by APT28.

Background

X-Tunnel functions as a network proxy utility, wrapping its own bespoke network protocol inside TLS.

Source: Malpedia (Fraunhofer FKIE).