Global CyberSecurity

Using assert() to Execute Malware in PHP 7 Environments

0

Published on 09/01/2020 – Last Updated on 09/01/2020 by OTC

Initially released December 2015, PHP 7 introduced a multitude of performance and security improvements. Approximately 43.7% of websites across the web currently use PHP 7.x, making it an incredibly popular scripting language — which is likely why attackers are creating malware to target environments which leverage it.

During a recent investigation, our team stumbled across some malicious code which is used to inject a .user.ini file into a PHP 7 environment and add zend.assertions = 1.

Continue reading Using assert() to Execute Malware in PHP 7 Environments at Sucuri Blog.

Page Authority 2.0 Is Coming This Month: What’s Changing and Why

Previous article

NATO Mine Countermeasures Group-1 participates in Sandy Coast exercise

Next article

You may also like

Comments

Comments are closed.