--- title: "New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP" url: https://daily.dev/posts/new-glutton-malware-exploits-popular-php-frameworks-like-laravel-and-thinkphp-ppuwexrnr source_url: https://thehackernews.com/2024/12/new-glutton-malware-exploits-popular.html type: article source: "The Hacker News" published: 2024-12-16T10:25:04.138Z updated: 2024-12-16T10:25:15.535Z tags: ["cyber", "php", "malware", "laravel"] reading_time: 4 upvotes: 45 comments: 1 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP **[The Hacker News](https://daily.dev/sources/thn)** · 4 min read · 45 upvotes · 1 comments ## Summary New Glutton malware has been discovered exploiting popular PHP frameworks like Laravel and ThinkPHP. Linked to the Winnti group, the malware harvests sensitive information, plants backdoors, and employs unconventional methods, including targeting cybercriminals. The attack chain involves modules to assess the environment and infect systems, while modifying system files for persistence. It includes a fully-featured backdoor with 22 commands that further the malware's reach and effectiveness. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@jsn1nj4** · 0 upvotes > Interesting stuff. Hope that means patches are coming (if it did indeed target framework vulnerabilities instead of just badly-configured apps). ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#php](https://daily.dev/tags/php), [#malware](https://daily.dev/tags/malware), [#laravel](https://daily.dev/tags/laravel) [View this post on daily.dev](https://daily.dev/posts/new-glutton-malware-exploits-popular-php-frameworks-like-laravel-and-thinkphp-ppuwexrnr)