MEDIUMMalware
Global

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

·Source: SecurityWeek

Updated:

Executive Summary

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek .

Analysis

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek .
Source Attribution

Originally published by SecurityWeek on Oct 23, 2026.

Related Threats

MEDIUMMalware

Trust Is Not What It Seems — And Fraudsters Are Counting on It

Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.

Dark Reading
HIGHMalware

Waiting for the PHP2Shell Onslaught as PoCs Proliferate

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/probes-seeking-php2shell-flaw-surge-including-from-botnets-image_small-7-a-33190.jpg" align=right hspace=4><b>No Confirmed Exploits in the Wild, but Researchers Find PHP Flaws Can Be Exploited</b><br>Cyberdefenders are bracing for breakthroughs in weaponized exploits targeting the just-patched PHP2Shell vulnerabilities. No mass, i

Bank Info Security
MEDIUMMalware

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit CVE-2026-109618 and CVE-2026-109619 (CVSS scores: 9.2), which can result in unauthenticated remote

CVE-2026-109618CVE-2026-109619
The Hacker News