---
title: Retracted link: Unit 42 no longer ties the "agentic attacker" intrusion at a European government entity to PHP2Shell | ctxsec
url: https://ctxsec.com/items/ai-agentic-attacker-php2shell-two-hour-ad-pivot
description: ""
status: "RETRACTED by source (Unit 42, Oct 25): the Oct 23 update describing this intrusion was withdrawn; the PHP2Shell link and AI-agent assessment should not be relied on, last updated Oct 25, 2026, 8:10 PM ET"
published: 2026-10-23
updated: 2026-10-25T20:10:00-04:00
---

> 

[← AI](/ai) · [markdown](/items/ai-agentic-attacker-php2shell-two-hour-ad-pivot.md)

RETRACTED by source (Unit 42, Oct 25): the Oct 23 update describing this intrusion was withdrawn; the PHP2Shell link and AI-agent assessment should not be relied on

2026-10-23 · updated

Oct 25, 2026, 8:10 PM ET

### Retracted link: Unit 42 no longer ties the "agentic attacker" intrusion at a European government entity to PHP2Shell

**Correction, Oct 25:** Unit 42 retracted the Oct 23 update that described this intrusion, including the AI-agent behavior below, saying it cannot confirm the attacker got in through PHP2Shell. Unit 42 has not republished the agentic-attacker details. We are keeping this item for the record; don't cite it as a confirmed case of an AI agent exploiting PHP2Shell.

_Original item (Oct 23), as published:_

Unit 42 did not name a model or tool, but it describes behavior that points to a machine operator: output wrapped in parseable delimiters (`==SHELLUSER==`, `==PASSWD==`), short serial tasks and fast pivots after failures. The result was credential and MFA-secret theft and an NTLM-relay path into Active Directory within two hours at a European government entity.

Why it matters for defenders: the window between a web-tier foothold and a domain-level attempt is shrinking to hours, so alerting on web-worker child processes needs to page someone, not wait for a morning queue. The same delimiter habit is also a detection opportunity while it lasts.

Sources: [Unit 42 threat brief: PHP CVE-2026-109618/109619 (Oct 25, 2:15 PM PT update retracts the Oct 23 update)](https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/)