WSO

Aliases: Webshell by Orb

Malware type
webshell
Family
Malware family
Profile updated
2026-07-07 14:26:34

Context

WSO, also known as Webshell by Orb, is a web-based shell used by attackers to gain and maintain access to compromised servers. It allows remote administration and execution of commands, making it a common tool in cyber intrusions.

Reports & references

  • aquasec.com — Loony Tunables Vulnerability Exploited By Kinsing (report)
  • malpedia.caad.fkie.fraunhofer.de — Php.Wso (report)
  • Mandiant — Cloud Metadata Abuse Unc2903 (report)
  • Kaspersky — 85345 (report)

External references