DEWMODE — Malware Profile

Webshell deployed on Accellion FTA appliances in the Cl0p-linked 2021 exploitation wave.

Attributed threat actors

• FIN11 machine-inferred link
• Cl0p machine-inferred link

Read the full analysis on IntelFusions