SquareShell is a web shell deployed by UNK_MassTraction using a PHP gadget shell command after exploiting CVE-2025-49113 in Roundcube. It is accessible at the endpoint 'plugins/newmail_notifier/mail_preview.php' and enables arbitrary code execution on the mail server.