Palo Alto Networks firewalls running outdated OS seem to be the target, as Chinese hackers chain PHP2Shell to Fragnesia for the campaign.
Brief · Source report
Chinese hackers build PHP2SHELL exploit, use it to root 25 servers, breach US government-affiliated firewalls
