Skip to content

Malware

X-Tunnel (.NET)

This is a rewrite of win.xtunnel using the .NET framework that surfaced late 2017.

X-Tunnel (.NET) is a Windows malware family operated by APT28.

Background

Appearing in late 2017, this variant is a reimplementation of win.xtunnel built on the .NET framework.


Source: Malpedia (Fraunhofer FKIE).