Comment by sparkling
21 hours ago
Yes. Even if you are not running PHP yourself, you should now prepare for:
- Any PHP site you ever put your email/password/personal data in being hacked over the next few hours (especially things like forums).
- As a result of the above, a massive wave of phishing attempts.
- Corporates/Admins panicking and turning off services as a precautionary measure over the next hours or days.
That's not panicking.
What else do you expect them to do? Pray?
Switching something off is far preferably over being hacked.
Agree, I think switching off any running PHP services *at the power socket* is a pretty rational response at this point.
It's not really panicking when CERT-EU is literally suggesting this (in the comment text of this story)
Sure, im referring to systems being turned off even if they are not running PHP at all. Out of fear of spillover effects or because they are unsure what they are running.
It’s probably advisable to go through your password manager and start deleting any accounts you no longer use. And of course make sure that you have zero shared passwords