CWPdoor backdoor replaces Control Web Panel's cwpsrv binary
XLab found CWPdoor, a passive backdoor shipped as a trojanized cwpsrv binary for Control Web Panel and triggered by crafted HTTP headers; over 340,000 CWP instances are internet-exposed.
XLab found CWPdoor, a passive backdoor shipped as a trojanized cwpsrv binary for Control Web Panel and triggered by crafted HTTP headers; over 340,000 CWP instances are internet-exposed.