Skip to content

Hide Navigation Hide TOC

Earthworm (ee14e483-b5ef-4931-9c2a-72046b6555cc)

Earthworm is an open-source tool. According to its project website, Earthworm is a "simple network tunnel with SOCKS v5 server and port transfer".[Elastic Docs Potential Protocol Tunneling via EarthWorm] According to joint Cybersecurity Advisory AA23-144a (May 2023), Volt Typhoon actors have used Earthworm in their attacks.[U.S. CISA Volt Typhoon May 24 2023]

Cluster A Galaxy A Cluster B Galaxy B Level
Volt Typhoon (4ea1245f-3f35-5168-bd10-1fc49142fd4e) Tidal Groups Earthworm (ee14e483-b5ef-4931-9c2a-72046b6555cc) Tidal Software 1
Volt Typhoon - Tidal (3290dcb9-5781-4b87-8fa0-6ae820e152cd) Tidal Groups Earthworm (ee14e483-b5ef-4931-9c2a-72046b6555cc) Tidal Software 1