Backdoor Hidden in Control Web Panel Server Runs Commands Without Logging
MALWAREControl Web Panelredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Researchers at QiAnXin's XLab have found a hidden backdoor in the web server used by Control Web Panel, a free tool for managing Linux hosting servers. The backdoor lets attackers run commands through web requests that leave no record in the server's access logs.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Review servers running Control Web Panel for signs of a root compromise, since installing the backdoor requires root access.
- Do not rely on web access logs alone to rule out this backdoor, because its requests do not appear in them.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products