Click-Fraud Sefnit Variant Shuns Tor for SSHFacebook security researchers discovered a new variant of the Sefnit click-fraud malware. Unlike previous versions that used Tor for communication, this one uses SSH over port 443.
Source:
Click-Fraud Sefnit Variant Shuns Tor for SSH