Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels

31.03.2026

19321

Russian CTRL toolkit spread via malicious LNK files in February 2026, routing C2 through FRP-tunneled RDP to evade detection.

Russian CTRL toolkit spread via malicious LNK files in February 2026, routing C2 through FRP-tunneled RDP to evade detection.

#C2 tunneling#RDP hijacking#hack#malware#cyber espionage

Got a topic? Write to ATLA WIRE on Telegram:t.me/atla_community