Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Party
Amazon (CJ Moses)
honeypot evidence of a pre-disclosure attempt
Claims this site attributes to this party
| Claim | Who says it | Status | Fact-check | Primary | Sources |
|---|---|---|---|---|---|
| An exploit attempt hit an Amazon honeypot on 17 October from an anonymisation network; proof-of-concept attempts began about 02:00 UTC on 21 October from multiple actors; after release 'PHP2Shell is now being broadly exploited in the wild' Primary party. Amazon adds: 'it's unclear if any of these attempts would have succeeded in real-world systems'. Attempts against honeypots, not compromises of victims. fact timeline → | Amazon (CJ Moses, AWS Security Blog) | reported | A2 Reported●●○○○○ superseded | 1/2 | Amazon THN |
Its sources in the vault
- Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed The Hacker News (Ravie Lakshmanan)