Malware

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

September 08, 2026 1 min read 5 views
cybersecurity malware news
A Linux rootkit targeting F5 BIG-IP APM devices intercepts PHP loading to inject a fileless web shell, likely exploiting CVE-2025-53521. Sophos and ESET analyzed the malware, named PoisonedRefresh.

Was this article helpful?

0 found this helpful

Related Articles

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1 min read

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo