The Hacker News5h agoenergy 100
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
image: The Hacker News
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.
This source publishes only a summary in its feed, so the full article lives at the outlet. The link above and below goes to the original.