PITFUEL
- Malware type
- loader
- Related IoCs
- 1 (1 malicious)
- Last IoC activity
- 2026-09-16 11:43:18
- Profile updated
- 2026-07-07 14:23:20
Targeted industries: technology-and-telecommunications government-and-public-sector
Context
According to Mandiant, this is a SparkGateway plugin that loads LITTLELAMB.WOOLTEA through JNI.
Reports & references
- cloud.google.com — Investigating Ivanti Exploitation Persistence (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Pitfuel (report)