Threats Tagged 'netch-gateway'
View all threats tagged with 'netch-gateway'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'netch-gateway'
Click on any threat for detailed analysis and mitigation recommendations
Attack campaigns targeting Korean users deploy remote control tools Radmin and UltraVNC to compromise systems. Attackers download compressed files containing batch scripts and remote administration software. After installing Radmin, they deploy UltraVNC along with proxy tools such as Netch-gateway and CCProxy to use compromised systems as proxy nodes. Recent variants also deploy SoftEther VPN to establish VPN servers on infected infrastructure. PowerShell scripts with Chinese language comments and tools familiar to Chinese-speaking actors suggest attribution to Chinese threat operators. These campaigns enable remote system control and abuse of compromised infrastructure for proxy services. Join the discussion | AlienVault OTX General | 09/04/2026, 07:52:40 UTC Added: 09/04/2026, 11:52:34 UTC |
Showing 1 to 1 of 1 result