CJ Moses

Reported Context (5)

AWS chief information security officer who said PHP2Shell payloads and anonymization infrastructure varied, and that the success of the attempts was unclear. PHP Shares Workaround for Unpatched RCE Vulnerability Affecting Unusual Configurations
CISO of Amazon Integrated Security; discussed Amazon's detection of exploit activity and trends in exploit development. PHP2Shell Flaws Exploited Before Public Disclosure, Amazon Says
AWS chief information security officer who described the observed exploitation activity and its uncertainty. Amazon Says PHP2Shell Exploitation Began Four Days Before Patches
Amazon CISO who said proof-of-concept exploits appeared and were used against Amazon sensors. PHP2Shell Exploit Attempts Surge as Most Identified Servers Remain Unpatched
Amazon CISO who said honeypot telemetry showed attempted exploitation from an anonymized IP address before known leaks were spotted. PHP Disclosure Leaks Exposed Two Critical Remote-Code-Execution Flaws

CVE (3)

People (7)

MITRE ATT&CK (5)

Vendors (12)

Products (7)

Tools (2)

Industries (2)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.