{"id":2461,"date":"2026-10-26T01:17:51","date_gmt":"2026-10-25T20:17:51","guid":{"rendered":"https:\/\/workserver.kz\/index.php\/2026\/10\/26\/mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge-ceaaccb7\/"},"modified":"2026-10-26T01:17:51","modified_gmt":"2026-10-25T20:17:51","slug":"mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge-ceaaccb7","status":"publish","type":"post","link":"https:\/\/workserver.kz\/index.php\/2026\/10\/26\/mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge-ceaaccb7\/","title":{"rendered":"Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge"},"content":{"rendered":"<p><strong>\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e:<\/strong> Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. Two days after PHP rolled out emergency fixes for the PHP2Shell vulnerabilities, threat actors have tried to use the flaws to spread a Mirai botnet. A security firm has also built an exploit that gets past a key memory protection, and an exposed attacker server has revealed custom tooling. Even so, no successful in-the-wild compromise has been confirmed so far. The threat has prompted many organizations to take systems\u2026<\/p>\n<p><!--more--><\/p>\n<p><strong>\u041d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435:<\/strong> \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.<\/p>\n<p><strong>\u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e:<\/strong> \u0415\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0440\u0438\u0441\u043a \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u0432\u043d\u0435, \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0442\u043e\u0433\u043e, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.<\/p>\n<p><strong>\u0427\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c:<\/strong> \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.<\/p>\n<p><strong>\u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0448\u0430\u0433:<\/strong> \u0421\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0438 \u0432\u0435\u0440\u0441\u0438\u044e \u0438\u0437 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0432\u043e\u0438\u043c \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0451\u043c \u041f\u041e. \u0415\u0441\u043b\u0438 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0435\u0441\u0442\u044c \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0438 \u043f\u043b\u0430\u043d \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.<\/p>\n<p class=\"wsnb-source\"><strong>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a:<\/strong> securityweek.com \u00b7 23.10.2026 17:45<br \/><a href=\"https:\/\/www.securityweek.com\/mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">\u041e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a<\/a><\/p>\n<p><em>WorkServer \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442; \u043f\u043e\u043b\u043d\u044b\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0443 \u043f\u0435\u0440\u0432\u043e\u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. Two days after PHP rolled out emergency fixes for the PHP2Shell vulnerabilities, threat\u2026<\/p>\n","protected":false},"author":0,"featured_media":2462,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[],"class_list":["post-2461","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-network_security"],"_links":{"self":[{"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/posts\/2461","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/comments?post=2461"}],"version-history":[{"count":0,"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/posts\/2461\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/media\/2462"}],"wp:attachment":[{"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/media?parent=2461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/categories?post=2461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/workserver.kz\/index.php\/wp-json\/wp\/v2\/tags?post=2461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}