Tunnel - Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 17:53:18 UTC
 Tool: X-Tunnel
Names
X-Tunnel
XTunnel
Shunnael
Trojan.Shunnael
XAPS
Category Malware
Type Tunneling
Description
X-Tunnel is a network proxy tool that implements a custom network protocol encapsulated in
the TLS protocol.
win.xtunnel_net is a rewrite of win.xtunnel using the .NET framework that surfaced late
2017.
Information
MITRE ATT&CK Malpedia
Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool X-Tunnel
Changed Name Country Observed
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a8450b3f-871c-4628-8057-0880894101f1
Page 1 of 2

APT groups
  Sofacy, APT 28, Fancy Bear, Sednit 2004-Apr 2025
1 group listed (1 APT, 0 other, 0 unknown)
↑
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a8450b3f-871c-4628-8057-0880894101f1
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a8450b3f-871c-4628-8057-0880894101f1
Page 2 of 2