News
cybersecurity Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster - Aikido Security cybersecurity Cisco Warns of Actively Exploited Firewall Vulnerability Allowing Remote DoS Attacks - CyberPress threat-intel Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses - GBHackers threat-intel 11 User & Entity Behavior Analytics (UEBA) Tools: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel 12 Cyber Threat Intelligence (CTI) Feeds & Services: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog - GBHackers threat-intel 12 Threat Intelligence Platforms (TIP): The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million - SecurityWeek cybersecurity Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys - The Hacker News threat-intel Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls - GBHackers threat-intel 12 SOAR Tools: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel 12 SIEM Tools: The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day - SecurityWeek cybersecurity Cyber Vulnerabilities Besiege Italy, Absent Clear Cause - Dark Reading cybersecurity Lumen Uncovers Secret Chinese Hacking Network Behind Years of Zero-Day Attacks on U.S. Infrastructure - CyberPress
1 / 15
All news ›
Cybersecurity

JOMANGY Malware Targets FreePBX Servers With Persistent Backdoors and SIP Credential Theft

CyberPress ·

The JOMANGY malware campaign targeting FreePBX servers has expanded beyond toll fraud to repeated credential theft, allowing attackers to abuse stolen telephone accounts even after victims remove the infection. According to the supplied September 2026 analysis, the INJ3CTOR3 operation now collects 17 configuration files containing SIP trunk, extension, database, management interface, and mail relay credentials. […] The post JOMANGY Malware Targets FreePBX Servers With Persistent Backdoors and SIP Credential Theft appeared first on Cyber Security News .

Continue on CyberPress ↗ ‹ All news Get the newsletter

The summary and image come from CyberPress; the image is shown from their website.