PoorWeb
- First seen
- 2020-08-15 00:00:00
- Malware type
- webshell
- Profile updated
- 2026-07-07 12:52:35
Targeted industries: technology-and-telecommunications government-and-public-sector
Context
PoorWeb is a webshell malware used to gain unauthorized access to web servers. It often targets vulnerable web applications to maintain persistence and execute remote commands.
Reports & references
- Mandiant — Rpt Apt37 (report)
- Kaspersky — 105074 (report)
- Kaspersky — 86487 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Poorweb (report)
- fortiguard.com — Fortiguard Threat Intelligence Brief May 10 2019 (report)
- blog.reversinglabs.com — Poorweb Exploiting Document Formats (report)
- asec.ahnlab.com — 18796 (report)