New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP

New Glutton malware has been discovered exploiting popular PHP frameworks like Laravel and ThinkPHP. Linked to the Winnti group, the malware harvests sensitive information, plants backdoors, and employs unconventional methods, including targeting cybercriminals. The attack chain involves modules to assess the environment and infect systems, while modifying system files for persistence. It includes a fully-featured backdoor with 22 commands that further the malware's reach and effectiveness.