Tag: EncystPHP
-
Ask Master: The “EncystPHP” Web Shell is Silently Annexing Global FreePBX Telephony Servers
A mundane telephony vulnerability has metamorphosed into a comprehensive server capitulation. Cybersecurity specialists have unearthed a pernicious web shell, christened EncystPHP, which entrenches itself within FreePBX, granting malefactors perpetual administrative dominion over the compromised system. This onslaught commenced in early December of the preceding year. The assailants weaponized vulnerability CVE-2025-64328, nested within the Endpoint Manager…