Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers

Huntress SOC found a threat actor exploiting a file upload flaw in recreation management to breach 3 municipal servers and steal payment data.