Hackers backdoor Linux servers using trojanized CWP web server

Threat actors are distributing a novel Linux malware named CWPdoor via a malicious modification of the cwpsrv web server component used in Control Web Panel (CWP). This backdoor grants unauthorized remote access to compromised systems. Administrators managing CWP instances should audit their servers immediately for indicators of compromise and ensure systems are updated.