Malware ORANGETAIL: Behinder-Like Java Web Shell July 19, 2026 ♡Follow0 A custom Java web shell similar to Behinder, deployed via KNUCKLEBALL to provide remote command execution on SonicWall SMA devices. Discovered from: SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access BehinderJavaORANGETAILSonicWallUTA0533web shell