No one has succeeded yet but exploitation will come
Whilst nobody has been successful to date, we don't expect that will last long,
on in-the-wild PHP exploitation
J
Jake KnottwatchTowr · head of threat intelligence
On the same topic: Cybersecurity
More →“The recovered logs record successful exploitation, including verification of root access by executing the id command through the installed webshell.”
“We recovered a custom PHP2Shell implementation tailored to the targeted firewall platform, version-specific profiles, exploitation logs and post-exploitation scripts”
“cyber shockwave ripping through our industrial heartlands”