CVE-2024-4577

Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit

• Cybercriminals
• Vulnerability Report

Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit

Do Son November 5, 2025 0

GreyNoise tracked a coordinated cryptojacking blitz exploiting PHP RCE flaws (CVE-2024-4577, ThinkPHP) to deploy miners on cloud infrastructure. The spike is driven by high Bitcoin prices.

Stealthy Attacks Exploiting PHP-CGI Vulnerability Target Japanese Organizations

• Cyber Security

Stealthy Attacks Exploiting PHP-CGI Vulnerability Target Japanese Organizations

Do Son March 9, 2025 0

Uncover the PHP-CGI vulnerability exploited in cyberattacks across Japan. Learn about the risks and impact on organizations.

Unseen Msupedge Malware Exploits PHP Flaw CVE-2024-4577 in Taiwanese University Cyberattack

• Cyber Security
• Malware
• Vulnerability

Unseen Msupedge Malware Exploits PHP Flaw CVE-2024-4577 in Taiwanese University Cyberattack

Do Son August 20, 2024 0

Uncover Backdoor.Msupedge, a sophisticated malware found in a recent cyberattack. Learn how it uses DNS tunneling for its covert communication.

Mitel Issues Critical Security Advisory for PHP Argument Injection Vulnerability

• Vulnerability

Mitel Issues Critical Security Advisory for PHP Argument Injection Vulnerability

Do Son July 14, 2024 0

Mitel has issued two critical security advisories warning users of a severe vulnerability in the PHP scripting engine

Hackers are actively exploiting PHP RCE vulnerability (CVE-2024-4577)

• Cyber Security
• Malware
• Vulnerability

Hackers are actively exploiting PHP RCE vulnerability (CVE-2024-4577)

Do Son July 12, 2024 0

A critical vulnerability in PHP, designated CVE-2024-4577, has become a prime target for cybercriminals within a day of its public disclosure

PHP Vulnerability (CVE-2024-4577) Actively Exploited in TellYouThePass Ransomware Attacks

• Cyber Security
• Malware
• Vulnerability

PHP Vulnerability (CVE-2024-4577) Actively Exploited in TellYouThePass Ransomware Attacks

Do Son June 10, 2024 0

This vulnerability is currently being actively exploited by malicious actors in a widespread ransomware campaign known as "TellYouThePass."

Researchers Detail Critical PHP Flaw CVE-2024-4577 with PoC Exploit Code

• Vulnerability

Researchers Detail Critical PHP Flaw CVE-2024-4577 with PoC Exploit Code

Do Son June 7, 2024 0

watchTowr published the technical details and a PoC exploit code for a recently disclosed critical vulnerability (CVE-2024-4577) in PHP

CVE-2024-4577: Critical PHP Vulnerability Exposes Millions of Servers to RCE

• Vulnerability

CVE-2024-4577: Critical PHP Vulnerability Exposes Millions of Servers to RCE

Do Son June 6, 2024 0

The vulnerability, tracked as CVE-2024-4577, could potentially allow unauthenticated attackers to take full control of affected PHP servers