As cited
Copy frozen at (site build).
threat intel
PHP Cryptomining Campaign: October/November 2025
Between August and October 2025, GreyNoise detected increased exploitation attempts targeting PHP and PHP-based frameworks, with attackers deploying cryptominers to take advantage of rising Bitcoin prices and improved mining economics.
Why it matters: Organizations running PHP applications face active cryptomining threats that consume resources and degrade performance; practitioners should audit PHP deployments for unauthorized process execution and implement runtime monitoring.
- Source published
- First seen by Cybersecurity Tracker