Specifically, the organization is retracting its initial assessment that the actions following a compromise at a European government agency involved leveraging PHP2Shell vulnerabilities.
A company spokesperson communicated to The Hacker News that "What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application."
This development comes amidst ongoing exploitation attempts related to PHP2Shell.
These activities are reportedly linked to global scanning operations suspected to originate from North Korea.
The shift in assessment suggests a refinement in understanding the attack vector against the targeted infrastructure.
This incident reflects a broader operational concern regarding the exploitation of application-layer vulnerabilities within governmental platforms.
