While attacks using vulnerabilities on commonly used content management systems are a real threat to
website owners not keeping up with updates, a new threat has been going around. Website owners are social
engineered to unknowingly install a backdoor on their webserver. This threat has been dubbed “CryptoPHP” by
Fox-IT’s Security Research Team and has been first detected in 2013.