XLab found the Control Web Panel web server recompiled into an implant called cwpdoor that executes signed commands and leaves…