Prevalence (%)0.68IncidentsFrom PHP exploitation to AWS lateral movementFrom PHP vuln to Sliver execution via cronAndroxGh0st usage (2024)RCE Vulnerability in PHP CGI Exploited by TellYouThePassMsupedge Backdoor Targeting Taiwanese UniversityMozi Botnet Using AndroxGh0st Toolkit to Target Cloud EnvironmentsLast editedMay 21, 2024 2:18 PMCISA KEVMetasploitNucleiNo. Incidents3