CyberSecurityBoardThreat Intel · CVEs · Products
Malware

ORANGETAIL: Custom Java Web Shell Deployed in SonicWall Attacks

July 19, 2026

ORANGETAIL is a Behinder-like custom Java web shell used by threat actors to maintain persistent access on compromised SonicWall SMA 1000 appliances. It is deployed alongside Suo5 and KNUCKLEBALL.