Hacker News

points by minitech 2 days ago | 0 comments

Which companies? The earliest claim of an exploit attempt in the wild I had heard was October 17th, and that was “extant”, not “rampant”.

I don’t suppose you’re thinking of when the issue was discovered? That was August 1st, according to https://calif.io/php2shell/#the-discovery.

[–] nubinetwork 2 days ago

Amazon said 4 days prior to patch, but I'm pretty sure the other one was cloudflare, I can't find the link in my browser history.

[–] minitech 2 days ago

So was “months” a typo for “4 days” or what?

[–] makmanalp 2 days ago

Both of those are coming from telemetry, and mainly show attempts. Those telemetry are generally heuristic based so they overcount and are most often unsuccessful - it took much layer for actual honeypots to be hit. See my timeline in my other comment if you’re interested in details and extract dates

[–] red-iron-pine 2 days ago

4 days is a month now is it?