---
title: "Laravel Sites Hacked: Public Folder Backdoors, Google-Only Redirects, and CPU Cryptomining (Likely via Livewire RCE)"
url: https://daily.dev/posts/aqsidvdnb
source_url: https://5balloons.info/laravel-sites-hacked-public-folder-backdoors-google-only-redirects-and-cpu-cryptomining-likely-via-livewire-rce
type: share
source: "PHP Dev"
author: "Damien seguy"
published: 2026-02-01T09:26:25.282Z
updated: 2026-02-01T09:26:25.285Z
tags: ["security", "php", "vulnerability", "laravel"]
upvotes: 3
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Laravel Sites Hacked: Public Folder Backdoors, Google-Only Redirects, and CPU Cryptomining (Likely via Livewire RCE)

**[PHP Dev](https://daily.dev/sources/phpdev)** · [@damienseguy](https://daily.dev/damienseguy) · 3 upvotes · 0 comments

## Summary

Multiple Laravel sites were compromised through a likely Livewire RCE vulnerability (CVE-2025-54068, affecting versions 3.x < 3.6.4). Attackers exploited improper serialized data handling during component hydration to place PHP backdoors in the public/ directory, implement Google-only redirects for SEO cloaking, and deploy cryptominers. The attack bypasses Laravel's routing and middleware by executing files directly from the public folder. Immediate mitigation requires upgrading Livewire to 3.6.4+, securing APP_KEY, locking public/ directory permissions, hunting for compromised files, and potentially rebuilding affected servers.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://5balloons.info/laravel-sites-hacked-public-folder-backdoors-google-only-redirects-and-cpu-cryptomining-likely-via-livewire-rce>

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments
- [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments
- [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#php](https://daily.dev/tags/php), [#vulnerability](https://daily.dev/tags/vulnerability), [#laravel](https://daily.dev/tags/laravel)

[View this post on daily.dev](https://daily.dev/posts/aqsidvdnb)