xHunt Campaign: New BumbleBee Webshell and SSH Tunnels Used for Lateral Movement
The actor used the BumbleBee webshell to upload and download files to and from the compromised Exchange server, but more importantly, to move laterally to other servers on the network.