Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

Researchers at QiAnXin's XLab have discovered a backdoor in the web server of Control Web Panel, a management tool for Linux hosting servers. This backdoor allows attackers to execute commands via web requests without leaving any record in the access logs. To install the backdoor, attackers must already have root access to the server, indicating a prior compromise. The backdoor enables attackers to send commands to the server without detection. The affected component is the web server that runs Control Web Panel. Attackers can leverage this backdoor to carry out unauthorized actions on the server.