Backdoor Targets FreePBX Asterisk Management Portal

Written in PHP and JavaScript, FreePBX is a web-based open-source GUI that manages Asterisk, a voice over IP and telephony server. This open-source software allows users to build customer phone systems.

During a recent investigation, I came across a simple piece of malware targeting FreePBX’s Asterisk Management portal which allowed attackers to arbitrarily add and delete users, as well as modify the website’s .htaccess file.

Let’s take a closer look at this backdoor.

Continue reading Backdoor Targets FreePBX Asterisk Management …

asterisk backdoor black hat tactics hacked websites labs note management portal sucuri labs website backdoor website malware infections website security