# ARKTunnel

A previously undocumented WebSocket-based remote-access trojan that tunnels TCP and UDP traffic and can execute files.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## The aircraft might not be flying, but the certificate has gone on vacation

DevFeed: [The aircraft might not be flying, but the certificate has gone on vacation](<https://devfeed.tech/articles/the-aircraft-might-not-be-flying-but-the-certificate-has-gone-on-vacation-8547.md>)

Original publisher: [Read original article](<https://www.theregister.com/offbeat/2026/09/12/the-aircraft-might-not-be-flying-but-the-certificate-has-gone-on-vacation/5295622>)

Author: Richard Speed

Published: 2026-09-12T09:00:00Z

Content type: news

Language: en

Sources: [www.theregister.com - Articles](<https://devfeed.tech/sources/www-theregister-com-articles.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [NVLink](<https://devfeed.tech/topics/nvlink.md>), [Vibe coding](<https://devfeed.tech/topics/vibe-coding.md>), [ARKTunnel](<https://devfeed.tech/topics/arktunnel.md>), [Cybercrime](<https://devfeed.tech/topics/cybercrime.md>), [.NET](<https://devfeed.tech/topics/net.md>), [how to create smooth CSS transitions](<https://devfeed.tech/topics/how-to-create-smooth-css-transitions.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [bork](<https://devfeed.tech/tags/bork.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [malware](<https://devfeed.tech/tags/malware.md>), [nvidia](<https://devfeed.tech/tags/nvidia.md>), [offbeat](<https://devfeed.tech/tags/offbeat.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [security](<https://devfeed.tech/tags/security.md>), [tailwind](<https://devfeed.tech/tags/tailwind.md>), [ubuntu](<https://devfeed.tech/tags/ubuntu.md>)

### AI overview

A news roundup covering security incidents, AI-related developments, semiconductor infrastructure, phishing, ransomware, open-source software, and web development. The supplied title concerns an aircraft certificate, while the body mainly contains unrelated headlines.

### Source excerpt

Information is not forthcoming from this screen

## Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

DevFeed: [Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure](<https://devfeed.tech/articles/untracked-nightmares-the-threats-hiding-behind-commodity-infrastructure-7757.md>)

Original publisher: [Read original article](<https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/>)

Author: Rem Dudas

Published: 2026-09-09T10:00:55Z

Content type: article

Language: en

Sources: [Unit 42](<https://devfeed.tech/sources/unit-42.md>)

Topics: [ARKTunnel](<https://devfeed.tech/topics/arktunnel.md>), [backdoor](<https://devfeed.tech/topics/backdoor.md>)

Tags: [arktunnel](<https://devfeed.tech/tags/arktunnel.md>), [backdoor](<https://devfeed.tech/tags/backdoor.md>), [c2](<https://devfeed.tech/tags/c2.md>), [cl-cri-1171](<https://devfeed.tech/tags/cl-cri-1171.md>), [cybercrime](<https://devfeed.tech/tags/cybercrime.md>), [docro-hijacker](<https://devfeed.tech/tags/docro-hijacker.md>), [gaming](<https://devfeed.tech/tags/gaming.md>), [malware](<https://devfeed.tech/tags/malware.md>), [pay-per-install](<https://devfeed.tech/tags/pay-per-install.md>), [payload](<https://devfeed.tech/tags/payload.md>), [remote-access-trojan](<https://devfeed.tech/tags/remote-access-trojan.md>), [threat-research](<https://devfeed.tech/tags/threat-research.md>), [youtube](<https://devfeed.tech/tags/youtube.md>)

### AI overview

An investigation of the CL-CRI-1171 cybercrime campaign describes how YouTube gaming lures and SEO poisoning delivered malware through a custom loader. It covers Docro Hijacker, ARKTunnel, and the Insomnia remote access Trojan.

### Source excerpt

An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks. The post Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure appeared first on Unit 42.