UK NCSC

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 9, 2026
Last mentionedSep 9, 2026

Timeline

1 articles · newest first

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Sophos found F5 BIG-IP APM malware that injects a PHP web shell into Apache's memory, evading disk scans, linked to exploited CVE-2025-53521.

The Hacker NewsSep 9, 07:36 UTC · Sep 9, 2026MalwareExploitedCVE-2025-535217 · 5 reads

Related CVEs

by mentions

CVE-2025-535212%9.3
Stack-Based Buffer Overflow in F5 BIG-IP APM Enables Unauthenticated RCE
published Oct 15, 2025F5 BIG-IP (BIG-IP Access Policy Manager / APM)KEV

Appears with

Sophosvendor · 1
CISAorganization · 1
c05d5254malware · 1
libphpproduct · 1
ESETvendor · 1
PoisonedRefreshmalware · 1
F5vendor · 1
Ireland NCSCorganization · 1
BIG-IP APMproduct · 1
Apacheproduct · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.