Cato Networks tracked Poisson using OpenSSH and Tailscale to maintain access after Havoc C2 outage in a 33-day intrusion.

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter ...