Original link: Pronsis Loader: A JPHP-Driven Malware Diverging from D3F@ck Loader / TrustWave.
Usuallt malware is written in C, C++, Rust, assembler etc..
Malware written in PHP and compiled to Java byte code is rather unique.