Backdoor Hidden in Control Web Panel Server Runs Commands Without Logging
MALWAREControl Web Panelredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
QiAnXin's XLab reports a backdoor inside the web server component of Control Web Panel (CWP), a free panel for managing Linux hosting servers. It executes attacker-supplied commands sent as web requests, and those requests do not appear in access logs. Installing it requires root access, so the attackers must already control the host.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Review servers running Control Web Panel for signs of a root compromise, since installing the backdoor requires root access.
- Do not rely on web access logs alone to rule out this backdoor, because its requests do not appear in them.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products