Threat Group: Winnti (APT41) Threat Type: PHP-Based Backdoor Malware Exploited Vulnerabilities: Known vulnerabilities in PHP frameworks (Laravel, ThinkPHP) Malware Used: Glutton, ELF-based Winnti backdoor Threat Score: High (8.5/10) – Due to its advanced modular design, stealth capabilities, and targeting of both legitimate and cybercriminal systems. Last Threat Observation: December