Check Point gateways breached via PHP2Shell to deploy VMware ESXi wiper

Threat actors exploited vulnerabilities in Check Point Security Gateway instances to deploy PHP2Shell, a backdoor, and subsequently wiped data on VMware ESXi hosts. The attack chain indicates a targeted campaign against perimeter devices, with the wiper payload suggesting destructive intent. The full scope and attribution remain unclear, but this highlights the risk of edge-device compromise leading to infrastructure destruction.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works