techbot (@techbot@social.raytec.co)
A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor
This analysis details a campaign involving two threat groups, UNC5518 and UNC5774, deploying the CORNFLAKE.V3 backdoor. UNC5518 compromises legitimate websites to serve fake CAPTCHA pages, luring visitors to execute a downloader script. UNC5774 then uses this access to deploy CORNFLAKE.V3, a sophisticated backdoor with variants in JavaScript and PHP. The malware collects system information, establishes persistence, and can execute various payloads including shell commands, executables, and DLLs. It communicates with command and control servers using HTTP and can abuse Cloudflare Tunnels for traffic proxying. The campaign also involves active directory reconnaissance and credential harvesting attempts via Kerberoasting.
Pulse ID: 68a6827e930a07d2130dda50
Pulse Link: https://otx.alienvault.com/pulse/68a6827e930a07d2130dda50
Pulse Author: AlienVault
Created: 2025-08-21 02:20:46
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#BackDoor #CAPTCHA #Cloud #CredentialHarvesting #CyberSecurity #HTTP #InfoSec #Java #JavaScript #Malware #OTX #OpenThreatExchange #PHP #Proxy #bot #AlienVault
Show Original Post
Tideways (@Tideways@phpc.social)
At Hypernode Dev Meet-Up, Benjamin & Rik (Sparkable) share what profiling Magento & PHP backends taught them: Native Lazy Objects in PHP 8.4, autoloading, composer-patches, benchmarks & more.
Sign up here: https://share-eu1.hsforms.com/2aY4jA5trQP2luwwyXc_fPg5mpvh
📅 [12.09.2025, 15:00 to 19:00] | 📍 [Hypernode Office, Ertskade 109, Amsterdam]
#Magento #PHP #Performance #DevMeetup #LazyLoading #Profiling
Show Original Post
dgoosens (@dgoosens@phpc.social)
wondering if this would be a good idea
have some kind of annotation or attribute for #PHP classes, interfaces etc that would specify the `alias` to be used in #PHPStorm when importing them...
Show Original Post
ocramius (@ocramius@mastodon.social)
Released: @roave /infection-static-analysis-plugin 1.39.0
https://github.com/Roave/infection-static-analysis-plugin/releases/tag/1.39.0
Just upgrading `vimeo/psalm`, while we still work on upgrading `infection/infection` after numerous internal breaking changes in upstream. #php #mutationTesting
Show Original Post
ocramius (@ocramius@mastodon.social)
Released: @roave /BetterReflection 6.60.0, now with #PHP 8.5 compatibility.
https://github.com/Roave/BetterReflection/releases/tag/6.60.0
Show Original Post
ocramius (@ocramius@mastodon.social)
Wrote a small list of symbols added within the #PHP language in version 8.5.
https://github.com/JetBrains/phpstorm-stubs/pull/1781
Show Original Post
nicosomb (@nicosomb@piaille.fr)
Never use `empty` function in PHP
https://dev.to/klnjmm/never-use-empty-function-in-php-4pb0
Show Original Post
Xinfe (@Xinfe@framapiaf.org)
Any recommendation for a very cheap #web #hosting ?
I want host a bunch of statically-generated sites for different users, with a single-endpoint #PHP backend for site administration. I do not need high reliability, nor much storage.
I'm currently thinking about Infomaniak's VPS-lite, or IONOS' VPS S.
If what I'm building grows, it would be good to be able to scale it up easily, but that's very hypothetical.
Also, I'm not sure I not know what I'm doing! ^^'
Show Original Post
MelvilleSpence (@MelvilleSpence@phpc.social)
Today we have reading the Docs
And tomorrow morning we have upgrading projects. But today,
Today we have reading the Docs.
#pest #php #laravel
https://pestphp.com/docs/installation
Show Original Post
symfony (@symfony@mastodon.social)
📢 Hackday location confirmed!
The Symfony Hackday will be held at:
📍 Volkshotel – Wibautstraat 150, 1091 GR Amsterdam
Saturday, Nov 29 | 🕘 09:30 – 15:00 CET
💻 Bring your laptop & your ideas!
🙌 A big thank you to Baksla.sh for sponsoring both our Hackday and the official SymfonyCon t.shirt!
#SymfonyCon #Hackday #Symfony #PHP
Show Original Post
decompwlj (@decompwlj@mathstodon.xyz)
A003623: Wythoff AB-numbers: floor(floor(n*phi^2)*phi), where phi = (1+sqrt(5))/2
3D graph, threejs - webGL ➡️ https://decompwlj.com/3Dgraph/A003623.html
3D graph Gen, threejs animation ➡️ https://decompwlj.com/3DgraphGen/A003623.html
2D graph, first 500 terms ➡️ https://decompwlj.com/2Dgraph500terms/A003623.html
#decompwlj #math #mathematics #maths #sequence #OEIS #JavaScript #php #graph #3D #threejs #webGL #triangular #numbers #primes #PrimeNumbers #palindromes #animation #FundamentalTheoremOfArithmetic #sequences #NumberTheory #classification #integer #decomposition #number #theory #equation #graphs #sieve #fundamental #theorem #arithmetic #research
Show Original Post
decompwlj (@decompwlj@mathstodon.xyz)
Decomposition into weight × level + jump of prime numbers in 3D, threejs - webGL (log(weight), log(level), log(jump))
➡️ https://decompwlj.com/3Dgraph/Prime_numbers.html
#decompwlj #math #mathematics #maths #sequence #OEIS #JavaScript #php #graph #3D #threejs #webGL #triangular #numbers #primes #PrimeNumbers #palindromes #animation #FundamentalTheoremOfArithmetic #sequences #NumberTheory #classification #integer #decomposition #number #theory #equation #graphs #sieve #fundamental #theorem #arithmetic #research
Show Original Post