value:  A backdoor used by APT29 created a Tor hidden service to forward traffic from the Tor client to local ports 3389 (RDP) 139 (Netbios) and 445 (SMB) enabling full remote access from outside the network. 
name: Proxy: Multi