Bypassing Network Detection with Graftcp

A new network open source tool called graftcp (GitHub page) has been discovered in everyday attacks by the Sysdig Threat Research Team (TRT). Nowadays, threat actors try to improve their techniques by using new tools (as we mentioned in the PRoot article) to enhance the compatibility of their code to hit as many targets as possible and hide their traces properly.

Graftcp is a tool that allows attackers to set up a local proxy to conceal direct …

article attackers attacks bypassing called code detection github hide local network network detection open source proxy research sysdig team techniques threat threat actors threat research tool tools traces