diff --git a/command-and-control/multihop-proxy.md b/command-and-control/multihop-proxy.md
index a06235c..8a2b803 100644
--- a/command-and-control/multihop-proxy.md
+++ b/command-and-control/multihop-proxy.md
@@ -6,6 +6,8 @@
 
 Multi-hop Proxy
 ===============
-Malware may chain together multiple proxies to disguise the source of malicious C2 traffic.
+Malware may chain together multiple proxies to disguise the source of malicious C2 traffic. 
+
+In MBC, this behavior includes installing a multi-hop proxy, such as Tor.
 
 **See ATT&CK:** [**Multi-hop Proxy**](https://attack.mitre.org/techniques/T1188/).
\ No newline at end of file