As cited
Copy frozen at (site build).
threat intel
Abusing Ngrok: Hackers at the End of the Tunnel | Huntress
Threat actors are leveraging ngrok, a tunneling service, to establish remote access to compromised networks. The abuse of legitimate tunneling tools by attackers highlights a common tactic that can evade traditional network monitoring.
Why it matters: Security teams and endpoint defenders need to monitor for ngrok traffic patterns and unauthorized tunneling services, as attackers use these legitimate tools to bypass firewall controls and establish persistent remote access.
- Source published
- First seen by Cybersecurity Tracker