Russian CTRL toolkit spread via malicious LNK files in February 2026, routing C2 through FRP-tunneled RDP to evade detection.
XPipe 22.0 offers more flexible authentication, extended integration of password managers, and improvements to containers.