Microsoft said the number of web shells has doubled since last year

▤ Summary

In a blog post yesterday, the Redmond company said it detected roughly 140,000 web shells per month between August 2020 and January 2021, up from the 77,000 average it reported last year. Web shells now play a crucial role in their attacks, providing a way to control the hacked server and then orchestrate a pivot to a targets internal network. These types of attacks are exactly what the US National Security Agency warned about in April 2020 when it published a list of 25 vulnerabilities that were often used to install web shells. Microsoft urges companies to re-prioritize their approach to dealing with web shells, which are slowly becoming one of todays biggest security threat. As ways to keep networks secure, the OS maker recommends a few basic actions: • Patch public-facing systems, as most web shells are installed after attackers exploit unpatched vulnerabilities.

▦ Linked Companies

Microsoft

$1B+