ThreatLabZ has just released a report that provides a summary of incident information related to the “1.php” Group. Historically, this Group used command and control servers (C&Cs) with “/1.php?” for the checkin URL path – which is the reason for the informal name used. They have repeatedly targeted one of our customers – so I […]
Latest Comments