Tag: CVE-2025-53521

A fileless rootkit dubbed PoisonedRefresh injects PHP web shells into the memory of compromised F5 BIG-IP APM appliances.
CSBadmin

PoisonedRefresh rootkit keeps F5 web shells invisible to disk scans

A fileless rootkit dubbed PoisonedRefresh injects PHP web shells into the memory of compromised F5 BIG-IP APM appliances.