PHP RCE Attack

FortiGuard Labs has observed increased exploitation attempts targeting the new PHP vulnerability on over 25,000 unique IPS devices. The TellYouThePass ransomware gang has been leveraging CVE-2024-4577, a remote code execution vulnerability in PHP to deliver web shells and deploy ransomware on targeted systems.