Hackers backdoor Linux servers using a trojanized CWP web server

A new Linux malware named CWPdoor is distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management interface. CWPdoor acts as a passive backdoor and is activated by a specially crafted request. The researchers said the campaign was not merely experimental and that real victims already exist in the wild.