Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation

The attack chains particularly involve attempts to deploy GSocket by leveraging web pre-existing web shells installed on already compromised servers. Most of the attacks have been found to single out servers running the popular LMS, Moodle.