Infiltration of vulnerable systems via the security issue, which was addressed by PHP maintainers in early June, was followed by the deployment of Msupedge as a pair of dynamic link libraries, an analysis from Symantec’s Threat Hunter Team showed. With command-and-control communications facilitated by DNS traffic, Msupedge could enable the execution of several commands, including those involving file downloads, process creation, and temporary file management, researchers found.

Source: SC Magazine