value:  menuPass has used Putty Secure Copy Client (PSCP) to transfer data. ;; OilRig has used Putty to access compromised systems. ;; Rocke has spread its coinminer via SSH. ;; TEMP.Veles has relied on encrypted SSH-based tunnels to transfer tools and for remote command/program execution.;;SSH fingerprint data shows that Sysrv-hello compromised 26 servers, utilising them as C2 servers. ;; APT24 has utilised SSH, in addition to a credential stealer such as MIMIKATZ to operate on victim hosts. ;; SSH client Bitvise was used to log into a VMWare ESXi with an open SSH connection. 
name: Remote Services: Ssh