Thursday 5 November
Global

Your region, kept on this device.

New Linux malware CWPdoor spread through a trojanized CWP web server

Severity
High
Sources
1

CWPdoor, a new Linux malware, is being distributed through a trojanised version of cwpsrv, the web server component of the Control Web Panel (CWP) management interface. The article does not state affected versions, CVE identifiers or indicators of compromise. Defenders should check whether they run CWP and verify the integrity of cwpsrv binaries against known-good copies.

For security analysts · Written by AI from 1 source · Wrong?

What to do

  1. Check whether any servers run Control Web Panel and its cwpsrv web server.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Thu 5 NovemberHackers backdoor Linux servers using trojanized CWP web serverBleepingComputer

Who reported · 1 outlet

BleepingComputer

Report a problem