CERT24PHP2Shell Exploited in Destructive Check Point Gateway AttacksLoading data…
CERT24Threat Observatory
Period

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

Attackers exploited PHP2Shell vulnerabilities to access Check Point Gateway appliances and deploy a wiper against victim organizations. The first wave began on October 30 and targeted Israeli organizations; the second began on November 2 and targeted organizations across multiple countries. No destructive activity was observed in the second wave.

← Back to intelligence

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

Attackers exploited PHP2Shell vulnerabilities to access Check Point Gateway appliances and deploy a wiper against victim organizations. The first wave began on October 30 and targeted Israeli organizations; the second began on November 2 and targeted organizations across multiple countries. No destructive activity was observed in the second wave.