JSPSpy and âfilebroserâ: A Custom File Management Tool in Webshell Infrastructure
ID: e22206b6-1cff-5e67-84a1-c6f3bd982e42
STIX ID: report--e22206b6-1cff-5e67-84a1-c6f3bd982e42
Feed Name: Hunt.io Blog
Threat Score
Hunt researchers identified a small cluster of JSPSpy web shells and an apparent rebranded File Browser panel ('filebroser') hosted across four servers in China and the United States; the report lists IPs, domains, ports (including non-standard ports), a DigiCert TLS certificate, and recommends layered detection using HTTP headers, response behaviors, and page titles to hunt and monitor these deployments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
