From Aug–Oct 2025, GreyNoise observed a surge in exploitation attempts against PHP and PHP-based frameworks as attackers deployed cryptominers—driven by rising Bitcoin prices and higher mining payoffs.
PHP Cryptomining Campaign: October/November 2025
calendar_today
November 4, 2025
domain
greynoise