Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity rating
Enlarge (credit: Getty Images) Ransomware criminals have quickly weaponized an easy-to-exploit vulnerability in the PHP programming language that executes malicious code on web servers, security researchers said. As of Thursday, Internet scans performed by security firm Censys had detected 1,000 servers infected by a ransomware strain known as TellYouThePass, down from 1,800 detected on Monday. The servers, primarily located in China, no longer display their usual content; instead, many list the site’s file directory, which shows all files have been given a.locked extension, indicating they have been encrypted. An accompanying ransom note demands roughly $6,500 in exchange for the decryption [...]