Threat Actor Malware Platform Exposed via Unlocked PHP Installation Page

A misconfigured PHP installation page exposed the internal infrastructure of a live malware distribution platform, allowing a security researcher to gain unintentional administrative access to a threat actor’s dashboard. What initially appeared to be a fake software download site turned out to be an active backend system used to deliver...

Read the full article at the source.