xHunt Campaign: New BumbleBee Webshell and SSH Tunnels Used for Lateral Movement
released on 2021-01-11 @ 09:00:11 PM
In a previous blog from September 2020 Palo Alto Networks referenced a newly discovered Webshell named BumbleBee Webshell. In this blog Palo Alto Networks explains in greater detail the BumbleBee Webshell and the SSH tunnels used by the threat group involved in the xHunt campaign to move laterally to other servers on the network.