FBI: Androxgh0st Malware Building Mega-Botnet for Credential Theft

### Executive summary The FBI and CISA issued a joint advisory on AndroxGh0st, a malware family used to build a botnet for credential theft and backdoor access by exploiting web application/server vulnerabilities (notably PHPUnit/CVE-2017-9841, Apache CVE-2021-41773, and Laravel-related flaws) and harvesting exposed .env files containing cloud and service credentials; the advisory includes indicators of compromise and mitigation recommendations.