Linux Rootkit Injects Fileless PHP Web Shells Into Compromised F5 BIG-IP Servers

<p>A stealthy Linux rootkit is giving attackers a new way to keep control of compromised F5 BIG-IP Access Policy Manager servers. Instead of leaving an obvious malicious PHP file behind, it places a web shell only in the memory used by the running server process. The activity is linked to BIG-IP APM webtop environments running [&#8230;]</p> <p>The post <a href="https://cybersecuritynews.com/linux-rootkit/">Linux Rootkit Injects Fileless PHP Web Shells Into Compromised F5 BIG-IP Servers</a> appeared first on <a href="https://cybersecuritynews.com">Cyber Security News</a>.</p>