SignalsMonitor LIVE INTELLIGENCE
CONFLICTACTIVE

48 mins ago

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper

SIGNALSMONITORSECURITY

What's happening

SignalsMonitor is following this as a conflict story. BleepingComputer is the outlet attached so far. The first report grouped here was at 13 Nov 2026, 16:21 UTC. The headline in use is “Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper”. This note is SignalsMonitor's own briefing, not the publisher's article.

What we know

Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts. [...

BleepingComputerRead at BleepingComputer

Story timeline

Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.

Reported by 1 outlet

  • BleepingComputer