Research

Update on Santy.e

A more detailed analysis of Santy.e is showing very worrying info.
The initial analysis suggested that with an updated version of php, one was not vulnerable for this attack, but it seems that Santy.e tries to exploit bad coding.

Santy.e tries to exploit php scripts with what is called “PHP Scripts Automated Arbitrary File Inclusion”.
This can only be prevented with decent, secure coding.
This means that every site is potentially in danger.

There are already a fair lot of reports of websites that get ‘attacked’ by infected hosts.

Expect sites to get compromised or become (very) slow, as unshielded attacks will result in a (great) increase of server load, as the server has to process the incoming data.
Sites/servers will need to come up with a way to block the attacks.

We will see how this develops.

Update on Santy.e

Your email address will not be published. Required fields are marked *

 

Reports

BlindEagle flying high in Latin America

Kaspersky shares insights into the activity and TTPs of the BlindEagle APT, which targets organizations and individuals in Colombia, Ecuador, Chile, Panama and other Latin American countries.

APT trends report Q2 2024

The report features the most significant developments relating to APT groups in Q2 2024, including the new backdoor in Linux utility XZ, a new RAT called SalmonQT, and hacktivist activity.

Subscribe to our weekly e-mails

The hottest research right in your inbox