OverviewList cybersecList Category cybersecAI Testing - Cybersecurity - F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7.

When Apache loads any of the three appliances' own PHP scripts, the malware adds the web shell to the copy held in memory, so a check of the file on disk can come back clean. Those three scripts are

10:10 am, September 9, 2026

guid

https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html

source_url

https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html

id: 2971
uid: gGtWo
insdate: 2026-09-09 10:10:14
title: F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
additional: Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7.

When Apache loads any of the three appliances' own PHP scripts, the malware adds the web shell to the copy held in memory, so a check of the file on disk can come back clean. Those three scripts are
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html
source_url: https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
View Details
Page Views

This page has been viewed 2 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec