THREAT OPS › Threat News › PHP Cryptomining Campaign: October/November 2025
PHP Cryptomining Campaign: October/November 2025
From Aug–Oct 2025, GreyNoise observed a surge in exploitation attempts against PHP and PHP-based frameworks as attackers deployed cryptominers—driven by rising Bitcoin prices and higher mining payoffs.
Original source: https://www.greynoise.io/blog/php-cryptomining-campaign