Tag: filemanager rat

1 Attack Reports | 0 Vulnerabilities

Attack reports

Mysterious hacker organization operating secretly for 6 years is exploiting critical cPanel vulnerability to deploy backdoor trojans

A previously unknown threat group designated Mr_Rot13 has been exploiting CVE-2026-41940, a critical authentication bypass vulnerability in cPanel & WHM, to compromise Linux servers globally. Active since at least 2020, the group deploys a Go-based payload installer that plants SSH keys, PHP webshe…
credential theft
ssh backdoor
southeast asia
telegram exfiltration
CVE-2026-41940
2026-05-11
cpanel exploitation
cpanel-python
filemanager
filemanager rat
wordpress targeting
Published: May 11, 2026
Linked vulnerabilities : CVE-2026-41940 (CVSS 9.3)
Downloadable IOCs: 1
Click here to see more Attack Reports