CERT24PHP2Shell exploitation began four days before patches were releasedLoading data…
CERT24Threat Observatory
Period

PHP2Shell exploitation began four days before patches were released

Amazon Threat Intelligence researchers say attackers began targeting two critical PHP2Shell vulnerabilities four days before security patches were released. The PHP security team issued patches on October 21. Amazon said the vulnerabilities are now being broadly exploited, although the extent of successful attacks remains unclear. Dataminr TRACE reported that the activity it observed was limited to scanning, fingerprinting, and use of non-working exploits, with no known compromises.

← Back to intelligence

PHP2Shell exploitation began four days before patches were released

Amazon Threat Intelligence researchers say attackers began targeting two critical PHP2Shell vulnerabilities four days before security patches were released. The PHP security team issued patches on October 21. Amazon said the vulnerabilities are now being broadly exploited, although the extent of successful attacks remains unclear. Dataminr TRACE reported that the activity it observed was limited to scanning, fingerprinting, and use of non-working exploits, with no known compromises.