SSH client and its Plink companion abused for tunneled access.
Read the full analysis on IntelFusions