Threat actors have successfully targeted F5 BIG-IP APM environments to deploy a stealthy Linux rootkit. The malicious software intercepts PHP loading sequences to inject a fileless webshell directly into system memory, effectively bypassing traditional disk-based detection mechanisms and posing a critical risk to enterprise infrastructure.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →