logo

JSPSpy and ‘filebroser’: A Custom File Management Tool in Webshell Infrastructure

ID: e22206b6-1cff-5e67-84a1-c6f3bd982e42

STIX ID: report--e22206b6-1cff-5e67-84a1-c6f3bd982e42

Feed Name: Hunt.io Blog

Threat Score
55/100

Date Published: 2026-02-16

Date Updated: 2026-04-28

...
...

Hunt researchers identified a small cluster of JSPSpy web shells and an apparent rebranded File Browser panel ('filebroser') hosted across four servers in China and the United States; the report lists IPs, domains, ports (including non-standard ports), a DigiCert TLS certificate, and recommends layered detection using HTTP headers, response behaviors, and page titles to hunt and monitor these deployments.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.