PHP Infiltrated with Backdoor Malware

Minimalist · Mar 29, 2021

The PHP project on Sunday announced that attackers were able to gain access to its main Git server, uploading two malicious commits, including a backdoor. They were discovered before they went into production.
Click to expand...

https://threatpost.com/php-infiltrated-backdoor-malware/

FanJ · Mar 30, 2021

PHP repository moved to GitHub after malicious code inserted under creator Rasmus Lerdorf's name
https://www.theregister.com/2021/03/29/php_repository_infected/

Some quotes:

The main code repository for PHP, which powers nearly 80 per cent of the internet, was breached to add malicious code and is now being moved to GitHub as a precaution.
Click to expand...

GitHub repos now canonical
The incident is still being investigated, but Popov said: "We have decided that maintaining our own git infrastructure is an unnecessary security risk, and that we will discontinue the git.php.net server. Instead, the repositories on GitHub, which were previously only mirrors, will become canonical. This means that changes should be pushed directly to GitHub rather than to git.php.net."
Click to expand...

The incident has renewed pressure from the community for cryptographic signing of code commits. "Even if we don't require it, we should STRONGLY encourage it. I've been signing my commits for several years now, it's not even that hard," said developer Sara Golemon in a comment to Popov's announcement.
Click to expand...

Log in or Sign up

PHP Infiltrated with Backdoor Malware

Minimalist Registered Member

FanJ Updates Team

Log in or Sign up

PHP Infiltrated with Backdoor Malware

Minimalist Registered Member

FanJ Updates Team

Useful Searches