Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
· thehackernews.com · popularity 21/100 · 0 similar stories today
Read the original at thehackernews.com →
Summary
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 2.