As cited
Copy frozen at (site build).
threat intel
Hackers backdoor Linux servers using trojanized CWP web server
A new Linux malware called CWPdoor is being distributed through a compromised version of cwpsrv, the web server component of Control Web Panel (CWP), a hosting management interface. Attackers are using the trojanized server to install backdoors on compromised systems.
Why it matters: Hosting providers and administrators running CWP are at immediate risk of system compromise and require verification of their cwpsrv installations to detect and remove the malware.
- Source published
- First seen by Cybersecurity Tracker