Source |
The Hacker News |
Identifiant |
5765077 |
Date de publication |
2022-07-15 22:33:16 (vue: 2022-07-16 07:05:28) |
Titre |
Hackers Targeting VoIP Servers By Exploiting Digium Phone Software |
Texte |
VoIP phones using Digium's software have been targeted to drop a web shell on their servers as part of an attack campaign designed to exfiltrate data by downloading and executing additional payloads.
"The malware installs multilayer obfuscated PHP backdoors to the web server's file system, downloads new payloads for execution, and schedules recurring tasks to re-infect the host system," Palo |
Notes |
|
Envoyé |
Oui |
Condensat |
additional attack backdoors been campaign data designed digium downloading downloads drop executing execution exfiltrate exploiting file hackers have host infect installs malware multilayer new obfuscated palo part payloads phone phones php recurring schedules server servers shell software system targeted targeting tasks using voip web |
Tags |
Malware
|
Stories |
|
Move |
|