Hackers backdoor Linux servers using trojanized CWP web server
Teaser from the source
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management interface. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on trojanized
Other advisories
- Criticalpwn_watch:claude-code-vscode-extension-ssh-backdoor-oct-2026Trojanized Claude Code VS Code extension (Anthropic.claude-code 2.1.312 and 2.1.313) in Cursor's extension marketplace planted an SSH backdoor on up to 5,000 machines
- Not ratedosv:GHSA-93qj-5q5v-3c2hTrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
- Criticalghsa:GHSA-93qj-5q5v-3c2hTrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
- HighCVE-2023-290593CX DesktopApp supply-chain attack (trojanized signed builds)
Other news entries
- Fake software installers are turning your PCs into profit centers for hackersNewsCSO Online
- Fake-download campaign uses trojanized installers to deliver monetization payloadsNewsMicrosoft Threat Intelligence
- Devs Hit by Trojanized Claude Code Extension for CursorNewsDark Reading
- Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorNewsThe Hacker News
- Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized CopiesNewsSecurityWeek
- New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web TrafficNewsThe Hacker News
- Counterfeit installers turn routine software downloads into enterprise breachesNewsCSO Online
- 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2NewsThe Hacker News
ID