#MoodlePythonBotAttack
Article: https://thehackernews.com/2025/01/python-based-bots-exploiting-php.html

Python bots exploit Moodle LMS via GSocket, installing PHP redirects to Indonesian gambling sites (pktoto[.]cc). Millions of requests linked to this campaign, leveraging existing webshells for persistence.#MoodlePythonBotAttack