Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts.
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
About this summary. This is a short excerpt from the description that BleepingComputer published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.bleepingcomputer.com/news/security/check-point-gateways-hacked-via-php2shell-to-deploy-vmware-esxi-wiper/
Source attribution: headline and facts are from BleepingComputer (bleepingcomputer.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
PHP2Shell Exploitation on Check Point Gateway
By Lotem Finkelstein, VP Research Key findings Beginning on 30 October 2026, an attacker executed scanning and exploitation activity against organizations with unpatched…
Russian cloud firm Beget rebuilds from scratch after data wiper attack
A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said.
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.
Fake GTA 6 download goes after Steam logins and crypto wallet data
Cynet researchers followed a “GTA 6 EXE file download” link from a Google Colab notebook to a ZIP archive and found a WARDEN Stealer loader inside. The malware takes…
Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell
Unpatched Check Point gateways were hacked worldwide, leading to root access, backdoors, network intrusion and destructive wiper attacks. Starting on 30 October, an…
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins
An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to…