AML.T0072 realized

Reverse Shell

Adversaries may utilize a reverse shell to communicate and control the victim system.

Typically, a user uses a client to connect to a remote machine which is listening for connections. With a reverse shell, the adversary is listening for incoming connections initiated from the victim system.

> curated attacks (1)

Research high 2023-08-23

Organization Confusion on Hugging Face: Impersonation to Reverse Shell

A researcher registered Hugging Face organization accounts impersonating real companies. Employees uploaded private models to the fake orgs — which could be swapped for poisoned models carrying reverse-shell payloads that execute when loaded.