Global CyberSecurity

Using assert() to Execute Malware in PHP 7 Environments

0

Last Updated on 09/01/2020 by OTC

Initially released December 2015, PHP 7 introduced a multitude of performance and security improvements. Approximately 43.7% of websites across the web currently use PHP 7.x, making it an incredibly popular scripting language โ€” which is likely why attackers are creating malware to target environments which leverage it.

During a recent investigation, our team stumbled across some malicious code which is used to inject a .user.ini file into a PHP 7 environment and add zend.assertions = 1.

Continue reading Using assert() to Execute Malware in PHP 7 Environments at Sucuri Blog.

Page Authority 2.0 Is Coming This Month: Whatโ€™s Changing and Why

Previous article

NATO Mine Countermeasures Group-1 participates in Sandy Coast exercise

Next article

You may also like

Comments

Comments are closed.