xHunt Archives - Unit42

The BumbleBee webshell, conceptually illustrated here, was discovered as part of an investigation of the continued xHunt campaign.

23,403

people reacted

xHunt Campaign: New BumbleBee Webshell and SSH Tunnels Used for Lateral Movement

By Robert Falcone
January 11, 2021 at 12:01 AM

10

25 min. read

A conceptual image illustrating the concept of espionage, including the type of stealthy activity using backdoors that threat researchers observed the xHunt campaign using.

25,787

people reacted

xHunt Campaign: Newly Discovered Backdoors Using Deleted Email Drafts and DNS Tunneling for Command and Control

By Robert Falcone
November 9, 2020 at 12:00 AM

14

12 min. read

20,301

people reacted

xHunt Campaign: New Watering Hole Identified for Credential Harvesting

By Brittany Barbehenn and Robert Falcone
January 27, 2020 at 6:00 PM

10

7 min. read

22,633

people reacted

xHunt Campaign: xHunt Actor’s Cheat Sheet

By Robert Falcone
December 4, 2019 at 8:00 PM

11

19 min. read

31,547

people reacted

xHunt Campaign: New PowerShell Backdoor Blocked Through DNS Tunnel Detection

By Robert Falcone and Brittany Barbehenn
October 10, 2019 at 5:00 AM

12

11 min. read

50,380

people reacted

xHunt Campaign: Attacks on Kuwait Shipping and Transportation Organizations

By Robert Falcone and Brittany Barbehenn
September 23, 2019 at 6:00 AM

34

22 min. read