THREATNOIR
Subscribe
Back to Feed
Threat IntelligenceJun 1, 2026

In the past like few months, shared some possible interesting samples with the guys that are usin...

Attackers are using PHP-based malware; one sample connects to Vietnam's Ministry of Foreign Affairs network.

Read at source

Summary

A threat actor is using PHP-based malware in their attacks. One identified sample connects to an IP address within the network of the Ministry of Foreign Affairs of Vietnam.

Indicators of Compromise

  • ip — 202.6.2.36

Entities

PHP (technology)