From Thursday on, Google blocked the php.net website, the official website for PHP scripting, as it reports that it hosts suspicious content. After investigation, the Group PHP found that two of their servers had been hacked by hackers and set up to distribute malware to their visitors.
According with the analysis of the PHP group, hackers managed to gain access to the servers hosting php.net, git.php.net, static.php.net, and bugbs.php.net.
Services have already been transferred to new, secure servers. In addition, since attackers could access the php.net SSL certificate, the certificate has been revoked.
According to the PHP Group, their users are not at risk from the breach. However, the passwords of the people who develop code in svn.php.net and git.php.net have changed.
Currently, it is known how hackers used to violate PHP servers.
