Description
The Port Redirect feature in malware empowers attackers to channel network traffic between various ports, either within the compromised system or through an external server. This functionality is particularly advantageous for evading firewalls and network monitoring tools. One of its most potent uses is in lateral movementโby redirecting traffic to other systems within a network, it facilitates easier access to additional targets. Even more insidiously, this feature allows the compromised system to act as a proxy for the attacker. By rerouting external traffic through the compromised machine, the attacker can effectively use its Internet connection to carry out further malicious activities, masking their own identity and location. This makes the compromised system a conduit for additional attacks, effectively implicating it in activities it had no part in.
Categories | Usurpation, Lateral Movements |
Dangerousness | High |