Analysis of Attack Activities Using SSH TOR Tunnels to Achieve Covert Persistence