Malware
Potassium
- First Reported
- Oct 23, 2026
- Latest Reported
- Oct 23, 2026
Reported Context (3)
- Sophos says threat actors have tried to leverage PHP2Shell to install Potassium, which it believes is a variant of the Mirai botnet. VulnCheck Reports PHP2Shell ASLR Bypass as Mirai Exploitation Attempts Emerge
- newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. PHP2Shell Exploit Attempts Reach Millions, but No In-the-Wild RCE Reported
- operators, said cybersecurity firm Sophos on Thursday. These have included apparent attempts to deliver Potassium, a variant of the Mirai malware built to target internet of things devices. PHP2Shell PoCs Proliferate as Patching Lags and Exploit Reports Conflict
CVE (2)
Malware (1)
People (4)
MITRE ATT&CK (4)
Vendors (11)
Products (7)
Tools (2)
Industries (3)
Countries (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.