We almost need some bot that logs in to every vulnerable PHP server and turns it off to prevent it being properly exploited before the server admin updates it..
I’ve thought about doing this in the past but have no trust in police to see it as a Good Samaritan act
Kindware instead of malware. Just goes around finding vulnerabilities and using them to patch things and improve security everywhere.