Apache httpd

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 9, 2026
Last mentionedSep 9, 2026

Timeline

1 articles · newest first

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory

Sophos analyzed a Linux rootkit, tracked as PoisonedRefresh, on hacked F5 BIG-IP APM devices hiding an in-memory web shell linked to exploited CVE-2025-53521.

Help Net SecuritySep 9, 11:05 UTC · Sep 9, 2026MalwareExploitedCVE-2025-535215 · 1 read

Related CVEs

by mentions

CVE-2025-535212%9.3
Stack-Based Buffer Overflow in F5 BIG-IP APM Enables Unauthenticated RCE
published Oct 15, 2025F5 BIG-IP (BIG-IP Access Policy Manager / APM)KEV

Appears with

ESETvendor · 1
F5 BIG-IP APMproduct · 1
PoisonedRefreshmalware · 1
Apachevendor · 1
F5vendor · 1
Sophosvendor · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.