Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Researchers from Dream discovered that attackers chained PHP2Shell with a Linux kernel exploit to target organizations in the US, Japan, Taiwan, and South Korea. The breach involved vulnerable PAN-OS versions on Palo Alto Networks firewalls, leading to internal network tunneling and Active Directory attacks.
Key points
- 25 servers rooted using PHP2Shell exploit
- US government-affiliated firewalls compromised
- Attackers targeted US, Japan, Taiwan, and South Korea
- Vulnerabilities found in Palo Alto Networks' PAN-OS
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.
Read the full story at The Register
