CWPdoor

Hackers backdoor Linux servers using trojanized CWP web server

Researchers have identified a new Linux malware, CWPdoor, being distributed through a trojanized version of cwpsrv, the web server component of the Control Web Panel (CWP) management interface. The attack replaces the legitimate binary with a compromised version, providing unauthorized remote access to affected Linux servers.