Threat analysts have uncovered a large-scale campaign targeting Elastix VoIP telephony servers with more than 500,000 malware samples over a period of three months.

Microsoft detects and tracks a monthly average of around 77,000 active web shells, spread across 46,000 infected servers.

Web shells can be written in any programming language, from Go to PHP. This allows hackers to hide web shells inside any website's code under generic names (like index.asp or uploader.php), which ...