Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Linux Rootkit Injects Fileless PHP Web Shells Into Compromised F5 BIG-IP Servers

Cybersecurity NewsSeptember 7, 20264 min read

A stealthy Linux rootkit is giving attackers a new way to keep control of compromised F5 BIG-IP Access Policy Manager servers. Instead of leaving an obvious malicious PHP file behind, it places a web shell only in the memory used by the running server process. The activity is linked to BIG-IP APM webtop environments running […] The post Linux Rootkit Injects Fileless PHP Web Shells Into Compromised F5 BIG-IP Servers appeared first on Cyber Security News.

A stealthy Linux rootkit is giving attackers a new way to keep control of compromised F5 BIG-IP Access Policy Manager servers. Instead of leaving an obvious malicious PHP file behind, it places a web shell only in the memory used by the running server process. The activity is linked to BIG-IP APM webtop environments running Apache and PHP. F5 has associated related activity with CVE-2025-53521, an exploited, unauthenticated remote-code-execution flaw, a risk…

Excerpt shown under the publisher's RSS terms · 72 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article