Palo Alto Networks finds BumbleBee webshell, SSH tunnels used in xHunt campaign
In September 2020, Palo Alto Networks began investigating a Microsoft Exchange server at a Kuwaiti organisation that a threat group compromised as part of a continued xHunt campaign. This investigation resulted in