TI Mindmap HUB
Threat Intelligence Report

Suspected DPRK Hackers Conduct Targeted PHP2Shell Scanning

๐Ÿ“… October 31, 2026 ๐Ÿ“ฐ blog.polyswarm.io ๐Ÿ” 2 CVE(s) referenced

Suspected North Korean operators are stealthily scanning hundreds of high-value government, financial, aviation, and industrial PHP servers worldwide for critical PHP2Shell flaws, potentially laying the groundwork for espionage, theft, and persistent access.

unclassified
CVE-2026-109619, CVE-2026-109618

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle