PoorWeb

First seen
2020-08-15 00:00:00
Malware type
webshell
Profile updated
2026-07-07 12:52:35

Targeted industries: technology-and-telecommunications government-and-public-sector

Context

PoorWeb is a webshell malware used to gain unauthorized access to web servers. It often targets vulnerable web applications to maintain persistence and execute remote commands.

Reports & references

  • Mandiant — Rpt Apt37 (report)
  • Kaspersky — 105074 (report)
  • Kaspersky — 86487 (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Poorweb (report)
  • fortiguard.com — Fortiguard Threat Intelligence Brief May 10 2019 (report)
  • blog.reversinglabs.com — Poorweb Exploiting Document Formats (report)
  • asec.ahnlab.com — 18796 (report)

External references