Ask HN: Where Are the PHP Hacks?
I see many sites going offline as precautionary measure to protect against php2shell, but so far no big name hacks have been reported? This seems rather unexpected, given the short notice and that half of the United States was still asleep at the time of patch release. So: Have there been any big hacks reported so far?
1 thread
I have scanned logs of my 5 small projects, one medium financial platform and one large e-commerce site. I was searching for memory anomalies and unusual POST sizes. I also checked if new files were created, IAM logs and reviewed in the database new accounts with high privileges. There is no indication in the logs that someone tried to exploit my services.