KNUCKLEBALL is a Python script deployed by threat actors to launch Suo5, an open-source HTTP proxy, and a Behinder-like web shell named ORANGETAIL. It is used in attacks exploiting SonicWall SMA 1000 vulnerabilities.
KNUCKLEBALL is a Python script deployed by threat actors to launch Suo5, an open-source HTTP proxy, and a Behinder-like web shell named ORANGETAIL. It is used in attacks exploiting SonicWall SMA 1000 vulnerabilities.