PITFUEL
- Malware type
- loader
- Profile updated
- 2026-07-07 14:23:20
Targeted industries: technology-and-telecommunications government-and-public-sector
Context
According to Mandiant, this is a SparkGateway plugin that loads LITTLELAMB.WOOLTEA through JNI.
Reports & references
- cloud.google.com — Investigating Ivanti Exploitation Persistence (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Pitfuel (report)