Chinese hackers build PHP2SHELL exploit, use it to root 25 servers, breach US government-affiliated firewalls
- Researchers report the first confirmed PHP2Shell compromises, targeting organizations linked to the US government
- Attackers chained PHP2Shell with a Linux privilege-escalation flaw to gain root access and persistence
- Breaches progressed from initial compromise to Active Directory attacks within minutes, underscoring patching urgency
We now have confirmation of the first successful exploits of the infamous PHP2Shell vulnerability discovered earlier this month.
The news comes courtesy of cybersecurity outfit Dream, who claim to have seen attackers breach organizations affiliated with the US government.
PHP2Shell is a name given to two critical-severity vulnerabilities found in PHP. When they were first disclosed, most of the cybersecurity community went full panic mode, given that PHP powers roughly 70% of all websites and web apps on the internet, and there was no patch at the time. The flaws allegedly enabled complete website takeover, and some government and education organizations in Europe even preemptively shut down their...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
