Wordfence sees no confirmed WordPress compromises from PHP2Shell
From October 23 to 27 Wordfence logged about 77,600 PHP2Shell requests from more than 2,000 IPs and still urges a PHP update plus restart.
74
Organization
Morphisec
- Mentions · 7d1
- Mentions · 30d4
- All mentions7
- First seenSep 1, 2026
- Last mentioned2d ago
Timeline
7 articles · newest firstWhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows
A WhatsApp ZIP lure deploys VulcanRAT207.A, a Windows RAT that escalates to SYSTEM and sideloads via VulkanInfo.
66
WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM
WhatsApp-delivered fake financial statement drops VulcanRAT207.A, gaining SYSTEM via Task Scheduler injection, BYOVD, and DLL side-loading.
65
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
A ThreatsDay roundup covers GlassWorm VS Code themes, VulcanRAT207, a Qilin extradition, and a rogue Gentlemen affiliate.
58
AI-Powered Malware Rewrites Itself Every Hour to Evade Signature-Based Detection
Morphisec warns AI-driven malware like PROMPTFLUX rewrites its code hourly via the Gemini API, eroding signature-based detection.
55
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
Elastic documents four persistent REVSTEALER-linked tools (ProManager, WinUpdate, SoftManager, LockAppHost); LockAppHost disables Windows Update and Defender to run a crypto miner.
45
Fake Claude Opus 5 app delivers malware and wipes its own tracks
A fake 'Claude Opus 5' GitHub repository impersonating Anthropic distributes RevStealer, a Windows infostealer stealing passwords, crypto wallets and VPN credentials.
55
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
Appears with
- RevStealermalware · 2
- Claude Opus 5ai model · 2
- Microsoftvendor · 2
- Anthropicorganization · 2
- Baiduorganization · 2
- WhatsAppproduct · 2
- Anthropicvendor · 2
- Morphisecvendor · 2
- Elasticvendor · 1
- Windowsproduct · 1
- SoftManagermalware · 1
- ElevationKatzmalware · 1
- Elastic Security Labsorganization · 1
- Gen Digitalorganization · 1
- Claudeproduct · 1
- Visual Studio Marketplaceproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.