Malware definition feed

Shell:PHP/V0ld3m0rt.A

Wed, 04 Mar 2015 16:53:19 GMT

"v0ld3m0rt" shell

Shell:PHP/Ketemu.A

Wed, 04 Mar 2015 16:53:19 GMT

"Ketemu" shell

Shell:PHP/Ly0kha.A

Wed, 04 Mar 2015 16:53:19 GMT

"ly0kha" shell

Shell:PHP/JpgPhp.A

Wed, 04 Mar 2015 16:53:19 GMT

"jpg-php lib v1.1.0 PHP shell"

Shell:PHP/Remoteadmin.A

Wed, 04 Mar 2015 16:53:19 GMT

"RemoteAdmin" shell

Spam:PHP/Mailer.Peterson.A

Wed, 04 Mar 2015 16:53:19 GMT

"PHP eMailer by Peterson" spam script

Spam:PHP/Postxml.Generic.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam scripts controlled by submitting XML POST-data

Flooder:PHP/Oey.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "oey flooder"

Flooder:PHP/Aim.A

Wed, 04 Mar 2015 16:53:19 GMT

AIM packet flooder

Generic:PHP/AriaCpcrack.A

Wed, 04 Mar 2015 16:53:19 GMT

cPanel exploit by "aria"

Generic:PHP/Dbman.Dbkiss.A

Wed, 04 Mar 2015 16:53:19 GMT

Database injector script "DbKiss"

Phishing:PHP/Banking.Rbscotland.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for the Royal Bank of Scotland

Spam:PHP/Mailer.Anonim.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "AnonimMailer"

Phishing:PHP/Banking.Intelligentfinance.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Intelligent Finance

Phishing:PHP/Banking.Lloyds.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Lloyds Bank

Phishing:PHP/Banking.Natwest.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for NatWest Personal Banking

Spam:PHP/Emailbomb.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "EmailBomb"

Spam:PHP/Mailer.Black.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "BlackMailer"

Spam:PHP/Mailer.Fmail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Fmail"

Spam:PHP/Mailer.Anonymousmail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "AnonymousMail"

Spam:PHP/Mailer.Paramail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "ParaMail"

Spam:PHP/Mailer.Ipmail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "IPmail"

Spam:PHP/Mailer.Byscra3zy.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "BYSCRA3ZY"

Spam:PHP/Mailer.Bl4ckun1x.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "BL4CKUN1X"

Spam:PHP/Mailer.Sphinx.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Sphinx Mailer"

Spam:PHP/Mailer.Madys.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Madys Mailer"

Flooder:PHP/Anarklik.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "Anarklik"

Flooder:PHP/Stp.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "STP"

Flooder:PHP/Nobud.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "nobud"

Spam:PHP/Atoxi.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Atoxi"

Spam:PHP/Blackmail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Blackmail"

Shell:PHP/Kadot.A

Wed, 04 Mar 2015 16:53:19 GMT

"KAdot" shell

Phishing:PHP/Hmrc.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for HM Revenue & Customs

Spam:PHP/Mailer.Alanche.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Alanche Mailer"

Phishing:PHP/Icicibank.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for ICICI Bank

Phishing:PHP/Banking.Rbcanada.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for the Royal Bank of Canada

Phishing:PHP/Banking.Smile.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Smile Bank

Phishing:PHP/Bank.Absa.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Absa Bank

Phishing:PHP/Allianceleicester.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Alliance Leicester

Phishing:PHP/Banking.Barclays.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Barclays

Phishing:PHP/Banking.Clydesdale.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Clydesdale Bank

Phishing:PHP/Banking.Eggonline.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Egg Online

Phishing:PHP/Banking.Halifax.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Halifax Bank

Generic:PHP/Surrogafier.A

Wed, 04 Mar 2015 16:53:19 GMT

"Surrogafier" script

Spam:PHP/Mailer.Nikol.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Nikol Mailer"

Generic:PHP/Irc.Newlive.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based IRC bot "newlive"

Generic:PHP/Suhosinbypass.A

Wed, 04 Mar 2015 16:53:19 GMT

Script exploiting a vulnerability in the Apache Suhosin patch

Generic:PHP/Injector.Genol.A

Wed, 04 Mar 2015 16:53:19 GMT

Scripts allowing execution of arbitrary commands using GET-, POST- or cookie-based request data

Flooder:PHP/Gewse.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "gewse"

Phishing:PHP/Alikay.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Alikay Naturals

Phishing:PHP/Craigslist.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Craigslist

Phishing:PHP/Banking.Banquepopulaire.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Banque Populaire

Phishing:PHP/Bank.AbbeySantander.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Abbey National / Santander

Phishing:PHP/Banking.Cahoot.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Cahoot Banking

Phishing:PHP/Banking.Hsbc.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for HSBC Banking

Phishing:PHP/Banking.Nationwide.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Nationwide Banking

Spam:PHP/Mailer.Hackstock.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "HackStock"

Spam:PHP/Mailer.Anonebomber.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "AnonEBomber"

Spam:PHP/Mailer.Mailman.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Mailman"

Spam:PHP/Mailer.Crazypostman.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Crazy Postman"

Generic:PHP/Defash.B

Wed, 04 Mar 2015 16:53:19 GMT

Defacement notice by "B"

Shell:PHP/RheAodCmd.A

Wed, 04 Mar 2015 16:53:19 GMT

"rhe / AoD / CMD" shell

Spam:PHP/Mailer.DN.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "D@N Mailer"

Spam:PHP/Mailer.Bombam.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Bombam mailer"

Spam:PHP/Mailer.Akpumpin.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Akpumpin Mailer"

Flooder:PHP/Boom.B

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "Boom flooder"

Flooder:PHP/Excess.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "excess flooder"

Shell:PHP/Cpanelturboforce.A

Wed, 04 Mar 2015 16:53:19 GMT

"cPanel Turbo Force" shell

Shell:PHP/Egfmsh3ll.A

Wed, 04 Mar 2015 16:53:19 GMT

"EGFM Sh3ll" shell

Shell:PHP/Drz0mbie.A

Wed, 04 Mar 2015 16:53:19 GMT

"Dr.Z0mbie Prv8" shell

Shell:PHP/Xhackers.A

Wed, 04 Mar 2015 16:53:19 GMT

"Xhackers Shell by Crazy_Hacker"

Shell:PHP/Unixunited.A

Wed, 04 Mar 2015 16:53:19 GMT

"UnixUnited / robotcop" shell

Spam:PHP/Mailer.Unixstats.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "UnixStats Mass MaiLer"

Shell:PHP/Inlove17.A

Wed, 04 Mar 2015 16:53:19 GMT

"inlove17" shell

Shell:PHP/0wned.A

Wed, 04 Mar 2015 16:53:19 GMT

"0wned reverse" shell

Shell:PHP/Halt.A

Wed, 04 Mar 2015 16:53:19 GMT

"Uploader by HalT" shell

Shell:PHP/Dc3.A

Wed, 04 Mar 2015 16:53:19 GMT

"dC3" shell

Generic:PHP/Dbman.7sn.A

Wed, 04 Mar 2015 16:53:19 GMT

Database injector script "7sn"

Generic:PHP/Irc.Lolwut.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based IRC bot "lolwut"

Generic:PHP/Proxy.HexonInject.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based website proxy injector by "hexon"

Shell:PHP/Fakomast3r.A

Wed, 04 Mar 2015 16:53:19 GMT

"FakoMasT3r" shell

Generic:PHP/Id.Ckrid.A

Wed, 04 Mar 2015 16:53:19 GMT

Defacement injection script by "Ckrid"

Generic:PHP/Defash.Buno.A

Wed, 04 Mar 2015 16:53:19 GMT

Defacement notice by "buno"

Generic:PHP/Irc.Dcom.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based IRC bot by "dcom"

Generic:PHP/Chaploit.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP Chaploit malware

Generic:PHP/Mustijan.A

Wed, 04 Mar 2015 16:53:19 GMT

"Mustijan" script

Generic:PHP/Irc.Insideteam.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based IRC bot by "InsideTeam"

Generic:PHP/Cracker.Cpftpcrack.A

Wed, 04 Mar 2015 16:53:19 GMT

"cPanel FTP Crack" script

Generic:PHP/Dbman.0813.A

Wed, 04 Mar 2015 16:53:19 GMT

Database injector "0813"

Shell:PHP/Myshellexec.A

Wed, 04 Mar 2015 16:53:19 GMT

"myshellexec" shell

Generic:PHP/Id.Php.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based injected defacement pages

Phishing:PHP/Remax.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for RE/MAX International

Phishing:PHP/Tdwaterhouse.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for TD Waterhouse

Phishing:PHP/Posteitaliane.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Poste Italiane

Spam:PHP/Bombsquad.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script by "BombSquad"

Spam:PHP/Mailer.Mig33.A

Wed, 04 Mar 2015 16:53:19 GMT

"Mig33" mailer

Spam:PHP/Mailer.Violaoeucc0101.A

Wed, 04 Mar 2015 16:53:19 GMT

"Violaoeucc0101" mailer

Spam:PHP/Mailer.NestedBuoamv.A

Wed, 04 Mar 2015 16:53:19 GMT

"Nested buoamv" mailer

Generic:PHP/Irc.Libworker.A

Wed, 04 Mar 2015 16:53:19 GMT

"libworker" IRC bot

Generic:PHP/S3n4t00r.A

Wed, 04 Mar 2015 16:53:19 GMT

"s3n4t00r" scripts

Shell:PHP/Avi.A

Wed, 04 Mar 2015 16:53:19 GMT

"avi" shell

Shell:PHP/Bilgi.A

Wed, 04 Mar 2015 16:53:19 GMT

"Bilgi" shell

Shell:PHP/Bws.A

Wed, 04 Mar 2015 16:53:19 GMT

"BwS" shell

Shell:PHP/Phpjackal.A

Wed, 04 Mar 2015 16:53:19 GMT

"PHPJackal" shell

Shell:PHP/S72.A

Wed, 04 Mar 2015 16:53:19 GMT

"s72" shell

Shell:PHP/Jerem.A

Wed, 04 Mar 2015 16:53:19 GMT

"Jerem" shell

Shell:PHP/Wls.A

Wed, 04 Mar 2015 16:53:19 GMT

"wls" shell

Shell:PHP/JoomlaAdminpad.A

Wed, 04 Mar 2015 16:53:19 GMT

"Joomla Adminpad" shell

Flooder:PHP/Jman.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "Jman"

Shell:PHP/N3tshell.A

Wed, 04 Mar 2015 16:53:19 GMT

"N3tshell" shell

Shell:PHP/Shadow.A

Wed, 04 Mar 2015 16:53:19 GMT

"Shadow" shell

Shell:PHP/C102.A

Wed, 04 Mar 2015 16:53:19 GMT

"C102Shell" shell

Shell:PHP/Tdshell.A

Wed, 04 Mar 2015 16:53:19 GMT

"TDshell" shell

Shell:PHP/Ncc.A

Wed, 04 Mar 2015 16:53:19 GMT

"NCC" shell

Spam:PHP/Mailer.Zombbomber.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "ZombBomber"

Spam:PHP/Mailbomber.B

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "MailBomber"

Generic:PHP/Zfxid.A

Wed, 04 Mar 2015 16:53:19 GMT

"ZfxId" scripts

Generic:PHP/Browser.Tur334vl.A

Wed, 04 Mar 2015 16:53:19 GMT

File browser script "tur334vl"

Phishing:PHP/Banking.Firstnational.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for First National Bank

Spam:PHP/Mailer.10hack.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "10hack Mailer"

Spam:PHP/Mailer.Youngest.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "youngest mailer"

Spam:PHP/Mailer.Dallas.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Dallas Mailer"

Flooder:PHP/Zdexile.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "zdExile"

Flooder:PHP/B0ss.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "b0ss UDP flooder"

Flooder:PHP/Mobilebomb.C

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "MobileBomb"

Flooder:PHP/Floodbots.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "floodBots"

Phishing:PHP/Mrbrain.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages created by the hacker group Mr-Brain

Flooder:PHP/Skype.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder targeting Skype servers

Shell:PHP/Nob0dycr3w.A

Wed, 04 Mar 2015 16:53:19 GMT

"nob0dyCr3w" shell

Shell:PHP/H4ntu.A

Wed, 04 Mar 2015 16:53:19 GMT

"h4ntu" shell

Shell:PHP/Hide.A

Wed, 04 Mar 2015 16:53:19 GMT

"hide" shell

Generic:PHP/Iskorpitx.A

Wed, 04 Mar 2015 16:53:19 GMT

"iskorpitx" script that downloads various defacement pages

Shell:PHP/Shellcomm.A

Wed, 04 Mar 2015 16:53:19 GMT

"shellcomm" shell

Shell:PHP/X0rg.A

Wed, 04 Mar 2015 16:53:19 GMT

"x0rg" shell

Shell:PHP/E57shell.A

Wed, 04 Mar 2015 16:53:19 GMT

"Yudi e57shell" shell

Shell:PHP/Mazurrel.A

Wed, 04 Mar 2015 16:53:19 GMT

"MaZuRRel" shell

Shell:PHP/Lama.A

Wed, 04 Mar 2015 16:53:19 GMT

"lama" shell

Shell:PHP/Winx.A

Wed, 04 Mar 2015 16:53:19 GMT

"winx" shell

Shell:PHP/Zaco.A

Wed, 04 Mar 2015 16:53:19 GMT

"ZaCo" shell

Shell:PHP/Antihutan.A

Wed, 04 Mar 2015 16:53:19 GMT

"Antihutan" shell

Shell:PHP/Azrail.A

Wed, 04 Mar 2015 16:53:19 GMT

"aZRaiL" shell

Shell:PHP/Myshell.A

Wed, 04 Mar 2015 16:53:19 GMT

"myshell" shell

Shell:PHP/Evilc0der.A

Wed, 04 Mar 2015 16:53:19 GMT

"evilc0der" shell

Shell:PHP/Antichat.A

Wed, 04 Mar 2015 16:53:19 GMT

"antichat" shell

Shell:PHP/VrsHck.A

Wed, 04 Mar 2015 16:53:19 GMT

"Vrs-hCk" shell

Shell:PHP/Hackru.A

Wed, 04 Mar 2015 16:53:19 GMT

"hackru" shell

Shell:PHP/R3v3ng4ns.A

Wed, 04 Mar 2015 16:53:19 GMT

"r3v3ng4ns" shell

Spam:PHP/Mailer.Ghostmail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "GhostMail"

Spam:PHP/Mailer.Mailsender.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "MailSender"

Spam:PHP/Mailer.Anonymail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "AnonyMail"

Spam:PHP/Mailer.Bombermailer.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "BomberMailer"

Spam:PHP/Mailer.Anonmail.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Anonmail"

Spam:PHP/Hotmail.B

Wed, 04 Mar 2015 16:53:19 GMT

Spam script targeting Hotmail

Spam:PHP/Mailer.Anubis.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Anubis Mailer"

Spam:PHP/Mailer.Advancedmailer.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "AdvancedMailer"

Spam:PHP/Mailer.Shockmailer.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Shock Mailer"

Spam:PHP/Mailer.Bombzer.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Bombzermailer"

Generic:PHP/Kararalshami.A

Wed, 04 Mar 2015 16:53:19 GMT

"Karar alShaMi t00l" script

Phishing:PHP/Visa.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Visa Inc.

Generic:PHP/Vpspinjector.A

Wed, 04 Mar 2015 16:53:19 GMT

"VPS Injector" script

Shell:PHP/Simshell.A

Wed, 04 Mar 2015 16:53:19 GMT

"SimShell" shell

Shell:PHP/Simorghev.A

Wed, 04 Mar 2015 16:53:19 GMT

"simorghev" shell

Shell:PHP/C100.A

Wed, 04 Mar 2015 16:53:19 GMT

"c100" shell

Shell:PHP/Mulcishell.A

Wed, 04 Mar 2015 16:53:19 GMT

"MulCiShell" shell

Shell:PHP/Mic22.A

Wed, 04 Mar 2015 16:53:19 GMT

"mic22" shell

Shell:PHP/Gfs.A

Wed, 04 Mar 2015 16:53:19 GMT

"GFS" shell

Shell:PHP/Dxshell.A

Wed, 04 Mar 2015 16:53:19 GMT

"DxShell" shell

Generic:PHP/Id.Byronet.A

Wed, 04 Mar 2015 16:53:19 GMT

Defacement injection script by "Byronet"

Generic:PHP/Cracker.Cmhacker.A

Wed, 04 Mar 2015 16:53:19 GMT

Malicious scripts released by "CM Hacker"

Flooder:PHP/Icq.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder targeting ICQ servers

Flooder:PHP/Msn.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder targeting MSN Messenger servers

Phishing:PHP/Banking.Commonwealth.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for the Commonwealth Bank

Phishing:PHP/Banking.Cooperative.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for the Cooperative Bank

Phishing:PHP/Banking.Bankofamerica.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Bank of America

Shell:PHP/Safe0ver.A

Wed, 04 Mar 2015 16:53:19 GMT

"Safe0ver" shell

Shell:PHP/Karwadanger.A

Wed, 04 Mar 2015 16:53:19 GMT

"karwadanger" shell

Shell:PHP/Itsecteam.A

Wed, 04 Mar 2015 16:53:19 GMT

"iTSecTeam" shell

Shell:PHP/Macker.A

Wed, 04 Mar 2015 16:53:19 GMT

"Macker" shell

Shell:PHP/Xakep.A

Wed, 04 Mar 2015 16:53:19 GMT

"xakep" shell

Shell:PHP/Uchiha.A

Wed, 04 Mar 2015 16:53:19 GMT

"Uchiha" shell

Shell:PHP/Itsmyard.A

Wed, 04 Mar 2015 16:53:19 GMT

"ItsmYarD" shell

Phishing:PHP/Banking.Yorkshire.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Yorkshire Bank

Phishing:PHP/Banking.Kiwi.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Kiwibank

Generic:PHP/Irc.Sniper.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based IRC bot by "sniper"

Phishing:PHP/Windowslive.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Windows Live Mail

Phishing:PHP/Aol.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for America Online

Shell:PHP/Infectslab.A

Wed, 04 Mar 2015 16:53:19 GMT

"Infectslab" shell

Shell:PHP/Powerserver.A

Wed, 04 Mar 2015 16:53:19 GMT

"PowerServer" shell

Shell:PHP/Nxs.A

Wed, 04 Mar 2015 16:53:19 GMT

"nXs" shell

Shell:PHP/Cingcrepet.A

Wed, 04 Mar 2015 16:53:19 GMT

"Cing Crepet / Indonesiandefacer" shell

Shell:PHP/DrG0n.A

Wed, 04 Mar 2015 16:53:19 GMT

"SeCuR!TY LI0NS / DR@G0N" shell

Shell:PHP/Rofik.A

Wed, 04 Mar 2015 16:53:19 GMT

"Rofik" shell

Shell:PHP/Akatsuki.A

Wed, 04 Mar 2015 16:53:19 GMT

"akatsuki" shell

Shell:PHP/Ibl13z.A

Wed, 04 Mar 2015 16:53:19 GMT

"ibl13Z" shell

Spam:PHP/Ebomb09.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Ebomb09"

Shell:PHP/Peterson.A

Wed, 04 Mar 2015 16:53:19 GMT

"Peterson" shell

Shell:PHP/Jambihackerlink.A

Wed, 04 Mar 2015 16:53:19 GMT

"jambihackerlink" shell

Shell:PHP/Sombrasystembr.A

Wed, 04 Mar 2015 16:53:19 GMT

"S O M B R A - SystemBR" shell

Generic:PHP/Upload.Googleanalist.A

Wed, 04 Mar 2015 16:53:19 GMT

"Google Analist" upload script

Shell:PHP/Storm7shell.A

Wed, 04 Mar 2015 16:53:19 GMT

"Storm7Shell" shell

Shell:PHP/Sansursansursansur.A

Wed, 04 Mar 2015 16:53:19 GMT

"sansursansursansur" shell

Shell:PHP/Ra1.A

Wed, 04 Mar 2015 16:53:19 GMT

"ra1" shell

Shell:PHP/Cih.A

Wed, 04 Mar 2015 16:53:19 GMT

"cih" shell

Generic:PHP/RenataSessmasq.A

Wed, 04 Mar 2015 16:53:19 GMT

"Renata SessMasq" scripts

Phishing:PHP/Banking.Ulster.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Ulster Bank

Spam:PHP/Mailer.Bombing.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Bombing Mailer"

Spam:PHP/Backuptoster.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Backuptoster"

Spam:PHP/Forever2008.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Forever2008"

Spam:PHP/Mailer.Egymailer.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "EgyMailer"

Phishing:PHP/Banking.Creditmutuel.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing pages for Crèdit Mutuel

Shell:PHP/Rgod.A

Wed, 04 Mar 2015 16:53:19 GMT

"rgod" shell

Spam:PHP/Imapspam.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "ImapSpam"

Spam:PHP/Mailer.Fela.A

Wed, 04 Mar 2015 16:53:19 GMT

Spam script "Fela mailer"

Flooder:PHP/Sms.A

Wed, 04 Mar 2015 16:53:19 GMT

Packet flooder "SMS"

Generic:PHP/Irc.Uchiha.A

Wed, 04 Mar 2015 16:53:19 GMT

PHP-based IRC bot by "Uchiha"

Shell:PHP/Webadmin.A

Wed, 04 Mar 2015 16:53:19 GMT

"webadmin" shell

Shell:PHP/Ekin0x.A

Wed, 04 Mar 2015 16:53:19 GMT

"ekin0x" shell

Shell:PHP/Nstview.A

Wed, 04 Mar 2015 16:53:19 GMT

"nsTView" shell

Shell:PHP/Stunshell.A

Wed, 04 Mar 2015 16:53:19 GMT

"STUNSHELL / ByroeNet" shell

Shell:PHP/Houdini.A

Wed, 04 Mar 2015 16:53:19 GMT

"houdini shellexec" shell

Shell:PHP/Srcrew.A

Wed, 04 Mar 2015 16:53:19 GMT

"SRCrew" shell

Shell:PHP/1n73ction.A

Wed, 04 Mar 2015 16:53:19 GMT

"1n73ction" shell

Shell:PHP/Antonious.A

Wed, 04 Mar 2015 16:53:19 GMT

"antonious aKa www.toolsb0x.com" shell

Spam:PHP/Mailer.Yellsoft.A

Wed, 04 Mar 2015 16:53:19 GMT

"yellsoft" mailer scripts

Generic:PHP/BhLsc.A

Wed, 04 Mar 2015 16:53:19 GMT

"BH-LSC log cleaner" scripts

Generic:PHP/Cpwrap.A

Wed, 04 Mar 2015 16:53:19 GMT

"cpwrap" script aimed at cPanel environments

Shell:PHP/N2.A

Wed, 04 Mar 2015 16:53:19 GMT

"N2" connback shell

Shell:PHP/Datacha0s.B

Wed, 04 Mar 2015 16:53:19 GMT

"DataCha0s" connback shell

Shell:PHP/Aresu.A

Wed, 04 Mar 2015 16:53:19 GMT

"AresU" connback shell

Generic:PHP/Swordfs.A

Wed, 04 Mar 2015 16:53:19 GMT

"swordfs" config scanner script

Generic:PHP/C0li.A

Wed, 04 Mar 2015 16:53:19 GMT

"c0li" apache log injector script

Generic:PHP/Fakeproc.A

Wed, 04 Mar 2015 16:53:19 GMT

Fakeproc scripts

Generic:PHP/Romnous.A

Wed, 04 Mar 2015 16:53:19 GMT

"Romnous rfiscan" scripts

Generic:PHP/Irc.Xscan.A

Wed, 04 Mar 2015 16:53:19 GMT

"xscan" IRC bot

Generic:PHP/Irc.Xdh.A

Wed, 04 Mar 2015 16:53:19 GMT

"xdh" IRC bot

Generic:PHP/Irc.Rficrack.A

Wed, 04 Mar 2015 16:53:19 GMT

"rficrack" IRC bot

Generic:PHP/Irc.Rel4y.A

Wed, 04 Mar 2015 16:53:19 GMT

"rel4y" IRC bot

Generic:PHP/Irc.Plasa.A

Wed, 04 Mar 2015 16:53:19 GMT

"plasa" IRC bot

Generic:PHP/Irc.Matoscrew.A

Wed, 04 Mar 2015 16:53:19 GMT

"MatosCrEw" IRC bot

Generic:PHP/Irc.Magnum.A

Wed, 04 Mar 2015 16:53:19 GMT

"magnum" IRC bot

Generic:PHP/Irc.Ketek.A

Wed, 04 Mar 2015 16:53:19 GMT

"KetEk" IRC bot

Generic:PHP/Irc.Kcb.A

Wed, 04 Mar 2015 16:53:19 GMT

"KcB" IRC bot

Generic:PHP/Irc.InsCyberz.A

Wed, 04 Mar 2015 16:53:19 GMT

"ins_cyberz" IRC bot

Shell:PHP/Cblord.A

Wed, 04 Mar 2015 16:53:19 GMT

"cbLorD" web shell

Generic:PHP/Nested.Bf404.A

Wed, 04 Mar 2015 16:53:19 GMT

"bf404" scripts with malicious code embedded

Flooder:PHP/Odix.A

Wed, 04 Mar 2015 16:53:19 GMT

"odix" packet flooder

Shell:PHP/N0va.A

Wed, 04 Mar 2015 16:53:19 GMT

"n0va" web shell

Phishing:PHP/Attijari.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing scripts by Attijari

Phishing:PHP/Auc61.A

Wed, 04 Mar 2015 16:53:19 GMT

Phishing scripts by auc61

Generic:PHP/Defacement.R00t3r.A

Wed, 04 Mar 2015 16:53:19 GMT

Defacement scripts by r00t3r

Generic:PHP/Irc.Assa.A

Wed, 04 Mar 2015 16:53:19 GMT

"Assa" IRC bot

Generic:PHP/Irc.Bamby.A

Wed, 04 Mar 2015 16:53:19 GMT

"BaMbY" IRC bot

Generic:PHP/Irc.Atrixteam.A

Wed, 04 Mar 2015 16:53:19 GMT

"atrixteam" IRC bot

Generic:PHP/Irc.Clx.A

Wed, 04 Mar 2015 16:53:19 GMT

"Clx" IRC bot

Generic:PHP/Irc.Continue.A

Wed, 04 Mar 2015 16:53:19 GMT

"ConTinuE" IRC bot

Generic:PHP/Irc.Bruno.A

Wed, 04 Mar 2015 16:53:19 GMT

"bRuNo" IRC bot

Shell:PHP/Xeratuta.A

Wed, 04 Mar 2015 16:53:19 GMT

"xeratuta" web shell

Flooder:PHP/Generic.Forger.A

Wed, 04 Mar 2015 16:53:20 GMT

Generic forged request flooder scripts

Generic:PHP/Irc.VjDenie.A

Wed, 04 Mar 2015 16:53:20 GMT

PHP-based IRC bot by "vj_denie"

Generic:PHP/Irc.Hajar.A

Wed, 04 Mar 2015 16:53:20 GMT

PHP-based IRC bot by "hajar"

Generic:PHP/Id.Albania.A

Wed, 04 Mar 2015 16:53:20 GMT

Defacement injection script by "Albania"

Generic:PHP/Whmcsdecoder.A

Wed, 04 Mar 2015 16:53:20 GMT

"WHMCS Decoder" script

Shell:PHP/Datacha0s.A

Wed, 04 Mar 2015 16:53:20 GMT

"Data Cha0s Connect Back Backdoor" shell

Spam:PHP/Mailer.Sierravista.A

Wed, 04 Mar 2015 16:53:20 GMT

Similar spam scripts allowed to be accessed from IP ranges 6.185.239.* and 8.138.118.*

Generic:PHP/Sesuai.A

Wed, 04 Mar 2015 16:53:20 GMT

"sesuai" auto-injection scripts

Generic:PHP/Irc.Genol.A

Wed, 04 Mar 2015 16:53:20 GMT

"genol" IRC bot

Generic:PHP/Irc.Shepdoy.A

Wed, 04 Mar 2015 16:53:20 GMT

"Shepdoy Multi Bot Scanner" IRC bot

Generic:PHP/Irc.Ubercracker.A

Wed, 04 Mar 2015 16:53:20 GMT

"UberCracker" IRC bot

Generic:PHP/Irc.Rafflesia.A

Wed, 04 Mar 2015 16:53:20 GMT

"rafflesia" IRC bot

Generic:PHP/Irc.Putr4xtreme.A

Wed, 04 Mar 2015 16:53:20 GMT

"putr4XtReme" IRC bot

Generic:PHP/Irc.Pitbull.A

Wed, 04 Mar 2015 16:53:20 GMT

"pitbull" IRC bot

Generic:PHP/Irc.Oldwolf.A

Wed, 04 Mar 2015 16:53:20 GMT

"oldwolf" IRC bot

Generic:PHP/Irc.Karawan.A

Wed, 04 Mar 2015 16:53:20 GMT

"karawan" IRC bot

Generic:PHP/Irc.Arabhack.A

Wed, 04 Mar 2015 16:53:20 GMT

"Arabhack" IRC bot

Generic:PHP/Irc.Devil.A

Wed, 04 Mar 2015 16:53:20 GMT

"devil" IRC bot

Generic:PHP/Irc.Fx29.A

Wed, 04 Mar 2015 16:53:20 GMT

"fx29" IRC bot

Shell:PHP/Jok.A

Wed, 04 Mar 2015 16:53:20 GMT

"jok" web shell

Spam:PHP/Mailer.Bossmailer.A

Wed, 04 Mar 2015 16:53:20 GMT

"BOSS" mailer

Shell:PHP/Soaksoak.A

Wed, 04 Mar 2015 16:53:20 GMT

"SoakSoak.Ru" malware

Spam:PHP/Mailer.Yogyacarderlink.A

Wed, 04 Mar 2015 16:53:20 GMT

"the3gayskeeters / Yogyacarderlink" mailer script

Shell:PHP/Newsh3ll.A

Wed, 04 Mar 2015 16:53:20 GMT

"NeW_Sh3LL by Net-Thug" shell

Spam:PHP/Mailer.Thepro3ject.A

Wed, 04 Mar 2015 16:53:20 GMT

"Mailer By thePro3ject [Junk]"

Generic:PHP/Id.Generic.A

Thu, 05 Mar 2015 17:19:19 GMT

Defacement injection scripts

Flooder:PHP/Perl.Anonymail.A

Fri, 06 Mar 2015 16:17:11 GMT

Packet flooder "Perl Anonymail"

Flooder:PHP/Small.A

Fri, 06 Mar 2015 16:17:11 GMT

Packet flooder "Small"

Flooder:PHP/Win32.Delf.I

Fri, 06 Mar 2015 16:17:11 GMT

Packet flooder "Win32 Delf I"

Generic:PHP/Irc.E107.A

Fri, 03 Apr 2015 22:56:12 GMT

"e107" IRC bot

Shell:PHP/Jalang.A

Tue, 14 Apr 2015 16:35:11 GMT

"jalanG" web shell

Phishing:PHP/Morganstanley.A

Mon, 20 Apr 2015 09:42:34 GMT

Morgan Stanley phishing pages

Phishing:PHP/Banking.Chasecom.A

Wed, 29 Apr 2015 21:51:58 GMT

Phishing pages for Chase.com

Spam:PHP/Mailer.Juniormafia.A

Wed, 29 Apr 2015 21:51:58 GMT

"juniormafia MasS Mailer"

Spam:PHP/Smtp.Generic.A

Wed, 06 May 2015 13:39:54 GMT

Spam scripts using obscured SMTP connections

Spam:PHP/Mailer.Kobra.A

Wed, 06 May 2015 13:39:54 GMT

"[S][h][a][u][n] Mass Mailer By Kobra Crew"

Flooder:PHP/Floodergiflood.A

Mon, 11 May 2015 00:23:14 GMT

Packet flooder "floodergiflood"

Shell:PHP/Lopphp.A

Mon, 11 May 2015 00:23:14 GMT

"lopphp" shell

Shell:PHP/Sea16.A

Mon, 11 May 2015 00:23:14 GMT

"sea16" web shell

Shell:PHP/Sexcrime.A

Tue, 12 May 2015 18:59:43 GMT

"SexCrime" web shell

Flooder:PHP/Kick.A

Wed, 13 May 2015 21:11:06 GMT

"kick" packet flooder

Spam:PHP/Mailer.Wael.A

Wed, 13 May 2015 21:11:06 GMT

"PRO Mailer V2 [Powered By #WAEL]"

Phishing:PHP/Dropbox.A

Mon, 18 May 2015 15:07:08 GMT

Dropbox phishing pages

Spam:PHP/Mailer.Cordoba.A

Mon, 25 May 2015 13:05:38 GMT

"Cordoba" mailerscript

Spam:PHP/Holako.A

Mon, 25 May 2015 13:05:38 GMT

"Bulk Mailer By HolaKo"

Flooder:PHP/Reloadx.A

Mon, 25 May 2015 13:05:38 GMT

"DDOS BOT PHP coded By RELOAD-X" packet flooder

Shell:PHP/SomeUtil.A

Thu, 28 May 2015 15:17:46 GMT

"some_util" web shell

Spam:PHP/Mrycef.A

Thu, 28 May 2015 15:17:46 GMT

"MrYcef Mailer"

Spam:PHP/Mailer.Ckutels.A

Thu, 28 May 2015 15:17:46 GMT

"Ckutels xMailer" spam script

Shell:PHP/Crazyweb.A

Fri, 29 May 2015 14:36:28 GMT

"CrazyweB" shell

Phishing:PHP/Outlook.A

Fri, 29 May 2015 14:36:28 GMT

Outlook phishing pages

Generic:PHP/Cryptophp.A

Tue, 02 Jun 2015 10:35:38 GMT

CryptoPHP is a threat that uses backdoored Joomla, WordPress and Drupal themes and plug-ins to compromise webservers on a large scale. CryptoPHP is spread through published pirated themes and plug-ins free for anyone to use (instead of having pay for them). After being installed on a webserver the backdoor has several options of being controlled which include command and control server communication, mail communication as well as manual control.

The detected file is the core backdoor source. Removing it could potentially break a website.

See for more information: http://blog.fox-it.com/2014/11/18/cryptophp-analysis-of-a-hidden-threat-inside-popular-content-management-systems/

Generic:PHP/Upload.Xsecurity.A

Tue, 02 Jun 2015 10:35:38 GMT

"sec4ever.com / xsecurity" upload script

Spam:PHP/Mailer.Blackshop.A

Tue, 02 Jun 2015 10:35:38 GMT

"PHP eMailer created by BlackSHOP"

Generic:PHP/Ana21.A

Wed, 03 Jun 2015 12:44:14 GMT

"ana21" malware

Phishing:PHP/Ayi.A

Wed, 03 Jun 2015 12:44:14 GMT

Phishing pages for Ayi.com

Shell:PHP/Err0r.A

Wed, 10 Jun 2015 13:24:11 GMT

"err0r" shell

Generic:PHP/V23au.A

Wed, 10 Jun 2015 13:24:11 GMT

"v23au" base64-encoded scripts

Shell:PHP/Egyspider.A

Thu, 11 Jun 2015 13:59:21 GMT

"egyspider" shell

Spam:PHP/Mailer.Love511.A

Thu, 11 Jun 2015 13:59:21 GMT

"LoVe511 Mail3R"

Shell:PHP/Columbus.A

Fri, 26 Jun 2015 19:14:58 GMT

"COLUMBUSSheLL"

Generic:PHP/Cryptophp.Injected.A

Mon, 29 Jun 2015 19:35:27 GMT

CryptoPHP is a threat that uses backdoored Joomla, WordPress and Drupal themes and plug-ins to compromise webservers on a large scale. CryptoPHP is spread through published pirated themes and plug-ins free for anyone to use (instead of having pay for them). After being installed on a webserver the backdoor has several options of being controlled which include command and control server communication, mail communication as well as manual control.

The detected file contains an injected piece of code that allows execution of the CryptoPHP malware. Removing this injection could potentially break a website.

See for more information: http://blog.fox-it.com/2014/11/18/cryptophp-analysis-of-a-hidden-threat-inside-popular-content-management-systems/

Shell:PHP/Cgitelnet.A

Fri, 03 Jul 2015 13:40:10 GMT

CGI telnet-based web shells

Spam:PHP/Mailer.Soldat.A

Wed, 08 Jul 2015 20:32:22 GMT

"SoLdaT.eXe Mailer.V2" script

Shell:PHP/Fx29.A

Mon, 13 Jul 2015 09:29:36 GMT

"FaTaLisTiCz FX29" shell

Spam:PHP/Mailer.J0k3r.A

Wed, 22 Jul 2015 11:12:27 GMT

j0k3r spam script

Spam:PHP/Mailer.Cav7.A

Wed, 12 Aug 2015 10:53:54 GMT

Spam script "Cav7 Mailer"

Shell:PHP/Jq.JQ

Wed, 12 Aug 2015 10:53:54 GMT

jq shell

Generic:PHP/Encoded.Unclassed.A

Thu, 24 Sep 2015 15:16:02 GMT

Unclassed scripts with malicious code embedded in base64 and/or gzipped code.

Spam:PHP/Mailer.D3xter.A

Tue, 29 Sep 2015 18:22:58 GMT

Spam script "D3xter Sp Mailer"

Generic:PHP/Defacement.Jyhackteam.A

Thu, 29 Oct 2015 12:08:41 GMT

Defacement scripts by JyhackTeam

Generic:PHP/Defacement.Albanian.A

Mon, 02 Nov 2015 15:01:44 GMT

Defacement scripts by Albanian Hacker

Shell:PHP/Shaje3.A

Mon, 02 Nov 2015 15:01:44 GMT

"shaje3 <>" shell

Shell:PHP/Teamcoder.A

Thu, 05 Nov 2015 16:27:41 GMT

"T E A M C O D E R" shell

Spam:PHP/Mailer.Allucard.A

Thu, 05 Nov 2015 16:27:41 GMT

Spam script "Allucard"

Phishing:PHP/Hotmail.A

Wed, 11 Nov 2015 15:28:26 GMT

Phishing pages for Hotmail and Windows Live Mail

Phishing:PHP/Gmail.A

Wed, 11 Nov 2015 15:28:26 GMT

Gmail phishing pages

Spam:PHP/Mailer.Darkmailer.A

Fri, 13 Nov 2015 18:12:34 GMT

Spam script "DarkMailer"

Shell:PHP/Rootshell.A

Tue, 17 Nov 2015 12:12:35 GMT

"RootShell" shell

Generic:PHP/Db.Dumper.Pawet.A

Wed, 09 Dec 2015 18:44:17 GMT

"pawet" database dumper

Flooder:PHP/Madscan.A

Fri, 11 Dec 2015 11:16:54 GMT

Scanner that finds UDP broadcast ip addresses.

Flooder:PHP/Vadim.A

Fri, 11 Dec 2015 11:16:54 GMT

Packet flooder "Vadim"

Spam:PHP/Sopyan.A

Wed, 30 Dec 2015 12:36:53 GMT

Spam script "Sopyan"

Generic:PHP/Agent.A

Tue, 05 Jan 2016 14:56:03 GMT

Generic PHP-based agent scripts

Spam:PHP/Mailer.DrXeon.A

Tue, 05 Jan 2016 14:56:03 GMT

Spam script "InBox Dr-XeOn galak Crypter Niahahhhah"

Generic:PHP/Defacement.Girgiti.A

Wed, 20 Jan 2016 18:14:43 GMT

Defacement scripts by GirGiti

Spam:PHP/Mailer.Mrspy.A

Wed, 20 Jan 2016 18:14:43 GMT

Spam script "Mister Spy Mailer"

Generic:PHP/Sqlshell.A

Tue, 02 Feb 2016 12:18:30 GMT

Scripts used for executing arbitrary SQL queries

Generic:PHP/Nested.Base64.A

Tue, 02 Feb 2016 12:18:30 GMT

Scripts with a not otherwise specified purpose, with code inserted through base64 encoded strings.

Spam:PHP/Mailer.Dangerousmailer.A

Wed, 03 Feb 2016 12:01:48 GMT

dangerous mailer script

Generic:PHP/Joomla.A

Thu, 11 Feb 2016 16:07:40 GMT

Malware aimed at Joomla installations

Shell:PHP/ReckyBogel.A

Thu, 11 Feb 2016 16:07:40 GMT

"recky a.k.a bogel" shell

Shell:PHP/AndalasOku.A

Mon, 22 Feb 2016 12:29:42 GMT

"shell.andalas_oku" shell

Generic:PHP/Defacement.Zoneh.A

Wed, 24 Feb 2016 12:58:03 GMT

Defacement scripts by zoneh

Generic:PHP/Exe.Unclassed.A

Tue, 22 Mar 2016 10:59:46 GMT

Executable scripts with not otherwise specified malicious purposes

Spam:PHP/Mailer.Perlmailer.A

Tue, 22 Mar 2016 10:59:46 GMT

Spam script "PerlMailer"

Generic:PHP/Irc.Byroenet.A

Tue, 05 Apr 2016 08:21:40 GMT

"ByroeNet" IRC bot

Spam:PHP/Horux.A

Tue, 12 Apr 2016 07:16:45 GMT

Spam script "Horux-Mailer"

Generic:PHP/Phpsetting.A

Wed, 13 Apr 2016 08:23:15 GMT

Scripts exposing the local PHP configuration

Generic:PHP/Urlerr.A

Tue, 19 Apr 2016 09:55:40 GMT

"urlerr XSS scan" scripts

Generic:PHP/Libworker.A

Tue, 19 Apr 2016 09:55:40 GMT

"libworker" PHP bot

Shell:PHP/Quadcore.A

Thu, 21 Apr 2016 07:51:48 GMT

"QuadCore-SHELL" shell

Flooder:PHP/Generic.C

Tue, 10 May 2016 09:00:31 GMT

Scripts flooding UDP packets

Shell:PHP/0x00.A

Thu, 19 May 2016 06:52:50 GMT

"0x00 PHP shell"

Shell:PHP/R57.A

Wed, 20 Jul 2016 08:05:11 GMT

"r57" shell

Flooder:PHP/Php.Mailspam.A

Wed, 20 Jul 2016 08:05:11 GMT

Packet flooder "mailspam"

Shell:PHP/Genericexec.A

Tue, 26 Jul 2016 14:11:40 GMT

Generic shells allowing submission of arbitrary commands for execution

Flooder:PHP/Udp.A

Wed, 27 Jul 2016 15:04:28 GMT

Packet flooder "Udp"

Spam:PHP/Xsender.A

Thu, 04 Aug 2016 09:33:45 GMT

Spam script "XSender"

Packer:PHP/Generic.Injected.A

Fri, 05 Aug 2016 10:36:02 GMT

Shell:PHP/RcShell.A

Fri, 12 Aug 2016 13:48:56 GMT

Spam:PHP/Mailer.Smailmax.A

Thu, 01 Sep 2016 09:11:04 GMT

SMTP mailer

Flooder:PHP/Irc.A

Fri, 16 Sep 2016 12:15:35 GMT

Packet flooder targeting IRC servers

Spam:PHP/Mailer.Rebels.A

Fri, 16 Sep 2016 12:15:35 GMT

"Rebels" mailer

Spam:PHP/Mailer.Meg4.A

Fri, 16 Sep 2016 12:15:35 GMT

Spam script "NEW-MEG4-MAIL"

Phishing:PHP/Rezult.A

Wed, 21 Sep 2016 09:09:03 GMT

Phishing pages for Rezult Group

Spam:PHP/Mailer.Postman.A

Mon, 26 Sep 2016 10:59:36 GMT

Spam script "Postman mailer"

Shell:PHP/Phpconfigspy.A

Tue, 11 Oct 2016 13:03:05 GMT

"PhpConfigSpy" shell

Generic:PHP/Proxy.Unclassed.A

Wed, 19 Oct 2016 12:16:27 GMT

PHP-based website proxy scripts

Generic:PHP/Zeus.A

Wed, 26 Oct 2016 09:11:18 GMT

File related to Zeus malware

Phishing:PHP/Banking.Ing.A

Thu, 27 Oct 2016 09:59:55 GMT

Phishing pages for ING Bank

Generic:PHP/Irc.Pbot.A

Fri, 11 Nov 2016 15:54:57 GMT

PHP-based IRC bot "pBot"

Spam:PHP/Mailer.Inbox.A

Tue, 29 Nov 2016 10:11:10 GMT

"INBOX" mailer script

Generic:PHP/Xzibit.A

Thu, 22 Dec 2016 08:53:38 GMT

Malware injected with other malware

Generic:PHP/Imposter.A

Tue, 27 Dec 2016 09:09:24 GMT

A malicious version of the LoginWall WordPress plug-in that injects pages with spam content.

Shell:PHP/Bypass.A

Wed, 04 Jan 2017 16:53:11 GMT

"bypass" web shell

Packer:PHP/Gzipbase64.B

Fri, 13 Jan 2017 15:53:33 GMT

Generic packer that uses Gzip compressed Base64 encoded data.

Generic:PHP/Irc.Generic.A

Tue, 17 Jan 2017 16:49:38 GMT

Generic PHP-based IRC bot scripts

Spam:PHP/Mailer.Mzh.A

Tue, 17 Jan 2017 16:49:38 GMT

"MzH" spam script

Shell:PHP/DarkShell.A

Mon, 20 Feb 2017 08:40:41 GMT

"Dark Shell" shell

Shell:PHP/Kanjut.A

Thu, 23 Feb 2017 11:47:34 GMT

"private shell by $Kanjut"

Packer:PHP/Chr.A

Fri, 24 Feb 2017 11:21:12 GMT

Uses chr() and intval() encoding:

$p12 = "intval";
$R0 = $K1e($p12($K1e($p12($K1e($p12("5" . $K1e($p12("51")))) . $K1e($p12($K1e($p12($K1e($p12("5" . $K1e($p12("51")))) . $K1e($p12("51")))) . $K1e($p12("5" . $K1e($p12("51")))))))) . $K1e($p12("5" . $K1e($p12("55"))))))

Spam:PHP/Mailer.Pro.A

Fri, 03 Mar 2017 10:35:04 GMT

Pro Mailer spam script

Shell:PHP/Blackshell.A

Tue, 14 Mar 2017 11:58:56 GMT

"Blackshell" shell

Generic:PHP/Cpanelcracker.A

Mon, 27 Mar 2017 11:59:05 GMT

"X-Cpanel Cracker by IST Team"

Generic:PHP/Redirect.Pharmacy.A

Thu, 30 Mar 2017 08:01:45 GMT

Injected redirects to pharmacy advertisment websites

Phishing:PHP/Apple.A

Wed, 12 Apr 2017 15:13:43 GMT

Apple phishing pages

Shell:PHP/CpanelD0mains.A

Mon, 08 May 2017 07:56:34 GMT

"cPanel d0mains config stealer" shell

Shell:PHP/Boff.A

Mon, 03 Jul 2017 09:48:08 GMT

"Web Shell by boff"

Generic:PHP/Scanner.A

Mon, 10 Jul 2017 08:24:34 GMT

Scripts to scan and index webhosting accounts

Phishing:PHP/Banking.Card.A

Fri, 21 Jul 2017 12:23:56 GMT

Phishing pages for creditcards.

Packer:PHP/Base64.A

Fri, 21 Jul 2017 12:23:56 GMT

Generic packer that uses base64_decode.

Shell:PHP/Casus.A

Mon, 24 Jul 2017 11:31:17 GMT

"SadrazaM | Casus" shell

Generic:PHP/Bot.A

Wed, 26 Jul 2017 12:38:03 GMT

PHP bot scripts

Generic:PHP/File.Manager.A

Wed, 26 Jul 2017 12:38:03 GMT

File manager

Phishing:PHP/Knab.A

Mon, 07 Aug 2017 14:34:56 GMT

Phishing pages for Knab bank.

Shell:PHP/Barner.A

Thu, 10 Aug 2017 07:56:44 GMT

"BArNEr" web shell

Phishing:PHP/Banking.Generic.A

Mon, 14 Aug 2017 07:34:06 GMT

Phishing pages for banking.

Spam:PHP/Mailer.Alexus.A

Mon, 14 Aug 2017 07:34:06 GMT

Phishing:PHP/Rabobank.A

Wed, 16 Aug 2017 09:17:11 GMT

Phishing pages for Rabobank bank.

Spam:PHP/Mailer.Priv8.A

Thu, 24 Aug 2017 09:43:43 GMT

PRIV8 mailer script

Shell:PHP/Filesman.A

Tue, 05 Sep 2017 07:53:19 GMT

"Filesman" shell

Generic:PHP/Upload.Generic.A

Mon, 11 Sep 2017 10:47:34 GMT

File upload scripts

Shell:PHP/Priv8.A

Wed, 13 Sep 2017 09:34:02 GMT

"Priv8" shell

Shell:PHP/B374k.A

Tue, 19 Sep 2017 08:53:34 GMT

"b374k" shell

Phishing:PHP/Redirect.Generic.A

Fri, 22 Sep 2017 06:10:43 GMT

Pages redirecting the user to various kinds of phishing sites

Phishing:PHP/Banking.Wellsfargo.A

Thu, 28 Sep 2017 12:44:09 GMT

Phishing pages for Wells Fargo

Spam:PHP/Mailer.Cazanova163.A

Thu, 28 Sep 2017 12:44:09 GMT

CaZaNoVa163 SMTP Mailer

Spam:PHP/Mailer.Sab3on.A

Thu, 28 Sep 2017 12:44:09 GMT

Spam script "Sab3on"

Packer:PHP/Fopo.A

Thu, 28 Sep 2017 12:44:09 GMT

FOPO creates equivalent PHP obfuscated code which requires no special server runtime for execution.

Generic:PHP/Eval.Postinjected.A

Wed, 04 Oct 2017 14:42:07 GMT

Scripts executing commands supplied in POST-based request data

Spam:PHP/Generic.F

Wed, 04 Oct 2017 14:42:07 GMT

Scripts used for sending spam using local e-mail sockets

Phishing:PHP/Wordpress.A

Wed, 04 Oct 2017 14:42:07 GMT

Phishing pages to intercept user data of Wordpress websites

Shell:PHP/Dhanush.A

Wed, 04 Oct 2017 14:42:07 GMT

Flooder:PHP/Bomber.A

Tue, 10 Oct 2017 15:08:16 GMT

Packet flooder "Bomber Flooder"

Generic:PHP/Mayhem.A

Tue, 10 Oct 2017 15:08:16 GMT

Dropper scripts for the Mayhem botnet virus.

Spam:PHP/Mailer.Gu3sswho.A

Tue, 10 Oct 2017 15:08:16 GMT

Spam script "Gu3ssWho?"

Spam:PHP/Mailer.Leafmailer.A

Tue, 10 Oct 2017 15:08:16 GMT

Spam script "Leaf PHPMailer"

Shell:PHP/C99.A

Wed, 11 Oct 2017 08:39:02 GMT

"c99" shell

Phishing:PHP/Banking.Paypal.A

Mon, 16 Oct 2017 10:39:09 GMT

Phishing pages for PayPal

Generic:PHP/Defacement.A

Mon, 23 Oct 2017 14:21:33 GMT

Website defacement pages and scripts

Generic:PHP/Include.A

Mon, 23 Oct 2017 14:21:33 GMT

Scripts that include external content in the website

Generic:PHP/Backdoor.Syrian.A

Mon, 30 Oct 2017 12:31:52 GMT

Generic:PL/Dataextract.A

Mon, 30 Oct 2017 12:31:52 GMT

Generic:PHP/Ircbot.C

Mon, 30 Oct 2017 12:31:52 GMT

Generic:JS/Js.D

Mon, 30 Oct 2017 12:31:52 GMT

Generic:JS/Js.C

Mon, 30 Oct 2017 12:31:52 GMT

Generic:PHP/Phplockit.A

Mon, 30 Oct 2017 12:31:52 GMT

Generic:PHP/Todo.A

Mon, 30 Oct 2017 12:31:52 GMT

Generic:PHP/Ads.A

Mon, 30 Oct 2017 15:13:50 GMT

Advertisment injections and injectors

Generic:PHP/Injector.Globals.A

Mon, 30 Oct 2017 15:13:50 GMT

Scripts allowing execution of arbitrary commands using GET-, POST- or cookie-based request data (based on register_globals)

Generic:PHP/Redirect.Generic.B

Mon, 30 Oct 2017 15:13:50 GMT

Scripts that redirection visitors to external pages

Shell:PHP/Wso.A

Mon, 30 Oct 2017 15:13:50 GMT

"Web shell by oRb"

Packer:PHP/Globals.A

Mon, 30 Oct 2017 15:13:50 GMT

Generic packer which uses $GLOBALS.

Packer:PHP/Gzipbase64.A

Mon, 30 Oct 2017 15:13:50 GMT

Generic packer that uses Gzip compressed Base64 encoded data.

Packer:PHP/Generic.G

Mon, 30 Oct 2017 15:13:50 GMT

Generic packer.

Packer:PHP/Createfunctiongzipbase64.A

Mon, 30 Oct 2017 15:13:50 GMT

Generic packer that creates a dynamic function which uses Gzip compressed Base64 encoded data as input.

Flooder:PHP/Generic.D

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Backdoor.B

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PL/Backdoor.D

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Backdoor.Determinator.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Backdoor.Ghostdz.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Backdoor.V0pcrew.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/Badlinks.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Francoslight.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/Gallery.B

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/Gallery.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/Getmama.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/Iframer.D

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/Iframer.B

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Injector.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Ircbot.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Joomla.B

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Jquery.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/Js.E

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Legit.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Metadata.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:JS/P81.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PL/Perl.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PL/Perlbypass.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Printlink.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Random.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Redirect.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Redirect.Tinyurl.A

Mon, 24 Dec 2018 08:53:31 GMT

PHP-based redirects to malicious sites, usually utilizing the header() function.

Generic:JS/Rucount.A

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Uploader.B

Mon, 24 Dec 2018 08:53:31 GMT

Scripts used by attackers to copy local files up to the affected server.

Generic:PHP/Wordpress.B

Mon, 24 Dec 2018 08:53:31 GMT

Generic:PHP/Zeus.B

Mon, 24 Dec 2018 08:53:31 GMT

Packer:PHP/Obfuscatedeval.A

Mon, 24 Dec 2018 08:53:31 GMT

Phishing:PHP/Askgoogle.A

Mon, 24 Dec 2018 08:53:31 GMT

Phishing:PHP/Askgoogle.B

Mon, 24 Dec 2018 08:53:31 GMT

Shell:PHP/C99.B

Mon, 24 Dec 2018 08:53:31 GMT

Shell:PHP/Eval.A

Mon, 24 Dec 2018 08:53:31 GMT

Shell:PL/Shell.Generic.D

Mon, 24 Dec 2018 08:53:31 GMT

Shell:PHP/Shell.Legit.A

Mon, 24 Dec 2018 08:53:31 GMT

Shell:PHP/Minishell.B

Mon, 24 Dec 2018 08:53:31 GMT

Shell:PHP/Minishell.A

Mon, 24 Dec 2018 08:53:31 GMT

Spam:PHP/Mailer.A

Mon, 24 Dec 2018 08:53:31 GMT

Files that leverage an infected server to send email, usually for spam mail or to attract victims for phishing sites.

Generic:PHP/Amz.B

Wed, 23 Jan 2019 09:57:57 GMT

Generic:PHP/Amz.A

Wed, 23 Jan 2019 09:57:57 GMT

Generic:HTML/Html.B

Wed, 23 Jan 2019 09:57:57 GMT

Generic:HTML/Iframe.A

Wed, 23 Jan 2019 09:57:57 GMT

Generic:PHP/Insecure.A

Wed, 23 Jan 2019 09:57:57 GMT

Generic:PHP/Php.A

Wed, 23 Jan 2019 09:57:57 GMT

Packer:PHP/Encoded.A

Wed, 23 Jan 2019 09:57:57 GMT

Shell:PHP/Evalrequest.Experimental.A

Wed, 23 Jan 2019 09:57:57 GMT

Generic:PHP/Ransomware.A

Thu, 07 Feb 2019 10:46:07 GMT

Generic:BIN/Fallchill.A

Tue, 12 Feb 2019 09:58:52 GMT

Shell:C/Passthru.A

Tue, 12 Feb 2019 09:58:52 GMT

Generic:BIN/Experimental.A

Mon, 08 Jul 2019 07:10:04 GMT

Generic:PHP/Loki.A

Mon, 02 Dec 2019 10:49:22 GMT

Shell:C/Passthru.B

Mon, 02 Dec 2019 10:49:22 GMT

Generic:PHP/Crypto.A

Thu, 06 Feb 2020 08:08:25 GMT

Packer:PHP/Vardec.A

Mon, 30 Mar 2020 07:39:09 GMT

Test:TXT/EICAR.A

Thu, 20 Aug 2020 08:09:35 GMT

Test file from the European Expert Group for IT Security. See https://www.eicar.org/?page_id=3950 for more information.

Generic:PHP/Metadata.B

Thu, 03 Dec 2020 09:59:32 GMT

Shell:PL/Shell.Generic.E

Mon, 15 Feb 2021 08:52:21 GMT

Generic:PL/Perlbypass.B

Fri, 26 Mar 2021 08:01:05 GMT

Generic:PHP/Hackedby.Experimental.A

Fri, 16 Apr 2021 15:22:10 GMT

Generic:HTML/Iframe.B

Fri, 16 Apr 2021 15:22:10 GMT

Shell:PHP/C99.D

Tue, 11 May 2021 08:26:43 GMT

Generic:PHP/Proxy.A

Tue, 18 May 2021 08:09:44 GMT

Generic:PHP/Backdoor.Mysql.A

Mon, 31 May 2021 07:58:14 GMT

Generic:PY/Backdoor.Izo.A

Tue, 08 Jun 2021 13:29:51 GMT

Generic:PHP/Cpanel.A

Wed, 23 Jun 2021 07:44:35 GMT

Shell:PHP/R57.B

Mon, 25 Oct 2021 07:49:42 GMT

Generic:PHP/Joomla.C

Fri, 29 Oct 2021 09:47:48 GMT

Generic:PHP/Magento.A

Fri, 12 Nov 2021 07:39:35 GMT

Generic:C/Exploit.A

Tue, 21 Dec 2021 11:34:25 GMT

Generic:PHP/Redirect.C

Mon, 14 Feb 2022 08:17:07 GMT

Generic:PHP/Infothief.A

Fri, 04 Mar 2022 08:30:02 GMT

Generic:PHP/Unspecified.A

Mon, 21 Mar 2022 14:47:04 GMT

Generic:PHP/ImageEmbedded.A

Mon, 11 Apr 2022 08:00:25 GMT

Shell:PHP/Cookieencoded.A

Thu, 28 Apr 2022 08:55:43 GMT

Generic:ASP/Filehacker.B

Thu, 19 May 2022 05:56:04 GMT

Generic:JS/Iframer.E

Wed, 20 Jul 2022 07:07:42 GMT

Generic:PHP/Random.B

Mon, 15 Aug 2022 07:24:14 GMT

Shell:PHP/Shell.Generic.C

Mon, 05 Dec 2022 06:37:19 GMT

Generic:JS/Badlinks.B

Thu, 12 Jan 2023 09:24:22 GMT

Generic:PHP/Backdoor.C

Wed, 01 Feb 2023 08:57:43 GMT

Shell:PHP/C99.C

Thu, 16 Feb 2023 11:29:40 GMT

Shell:PY/Shell.Generic.F

Wed, 22 Feb 2023 07:41:12 GMT

Generic:PL/Ircbot.D

Thu, 23 Mar 2023 07:18:34 GMT

Generic:PHP/Wordpress.C

Thu, 13 Apr 2023 06:49:21 GMT

Generic:JS/Js.A

Mon, 01 May 2023 08:57:03 GMT

Packer:PHP/Obfuscatedevalrequest.A

Mon, 01 May 2023 08:57:03 GMT

Generic:JS/Seospam.A

Mon, 15 May 2023 07:27:33 GMT

Generic:PHP/Unwantedplugin.A

Wed, 19 Jul 2023 07:12:25 GMT

Generic:JS/Cryptominer.Suspicious.A

Fri, 08 Sep 2023 08:38:33 GMT

Shell:PHP/C99.E

Thu, 05 Oct 2023 07:54:54 GMT

Generic:PHP/Backdoor.Indoxploit.A

Fri, 03 Nov 2023 15:44:39 GMT

Generic:SH/Install.A

Tue, 21 Nov 2023 16:11:49 GMT

Catch-all category for shell files used to install or compile malware to compromise a system.

Flooder:PHP/Generic.E

Mon, 11 Dec 2023 09:24:50 GMT

Generic:PHP/Ircbot.B

Thu, 04 Jan 2024 11:21:00 GMT

Generic:PHP/Redirect.Pharma.A

Wed, 14 Feb 2024 09:12:15 GMT

PHP-based redirects to malicious sites with the intended destination of an illegal pharmaceutical site.

Generic:HTML/Hackedby.B

Fri, 16 Feb 2024 09:34:58 GMT

Generic:JS/Cryptominer.A

Fri, 01 Mar 2024 09:28:15 GMT

Generic:PL/Backdoor.E

Mon, 25 Mar 2024 09:43:49 GMT

Generic:HTML/Html.A

Tue, 30 Apr 2024 08:05:07 GMT

Rarely used category for static HTML code that doesn't fit into other categories.

Packer:PHP/Encoded.Suspicious.A

Thu, 02 May 2024 07:40:51 GMT

Generic:HTML/Metarefresh.A

Fri, 03 May 2024 07:59:29 GMT

HTML-based browser redirection using

Generic:BIN/Trojan.Generic.A

Fri, 03 May 2024 07:59:29 GMT

Catch-all category for malicious executable binary files.

Generic:JS/Js.JS

Tue, 07 May 2024 09:17:35 GMT

Generic:HTML/Pharma.A

Tue, 07 May 2024 09:17:35 GMT

Generic:JS/Iframer.C

Mon, 13 May 2024 08:32:43 GMT

Generic:PHP/Iframer.A

Mon, 13 May 2024 08:32:43 GMT

Generic:JS/Redirect.D

Mon, 13 May 2024 08:32:43 GMT

Generic:PHP/Redirect.B

Mon, 13 May 2024 08:32:43 GMT

Generic:PHP/Suspicious.A

Tue, 14 May 2024 07:29:12 GMT

Shell:PHP/Filemanager.A

Wed, 15 May 2024 08:30:41 GMT

Generic:ASP/Backdoor.Generic.A

Wed, 15 May 2024 08:30:41 GMT

Catch-all category for ASP-based backdoor files.

Generic:PHP/Hackedby.A

Thu, 16 May 2024 07:25:52 GMT

Generic:JS/Include.B

Thu, 16 May 2024 07:25:52 GMT

Generic:PHP/Jsinclude.A

Thu, 16 May 2024 07:25:52 GMT

Files that use PHP to place malicious external JavaScript references into visited pages.

Generic:HTML/Seospam.B

Thu, 16 May 2024 07:25:52 GMT

Phishing:HTML/Generic.Suspicious.A

Thu, 16 May 2024 07:25:52 GMT

Category under which all phishing kit files are marked.

Note: Despite the presence of "HTML" in the name, this category includes all active portions of a phishing operation, including PHP-based form processing, credential mailers, and card validation JavaScript. "Benign" portions of phishing kits, like CSS and images, do not get marked.

Generic:PHP/Backdoor.A

Fri, 17 May 2024 07:53:43 GMT

Generic:PHP/Injector.B

Fri, 17 May 2024 07:53:43 GMT

Generic:PHP/Uploader.A

Fri, 17 May 2024 07:53:43 GMT

Scripts used by attackers to copy local files up to the affected server.

Phishing:HTML/Generic.B

Fri, 17 May 2024 07:53:43 GMT

Shell:PHP/Evalrequest.A

Fri, 17 May 2024 07:53:43 GMT

Shell:PHP/Filehacker.A

Fri, 17 May 2024 07:53:43 GMT

Shell:PHP/Shell.Generic.B

Fri, 17 May 2024 07:53:43 GMT

Spam:PHP/Mailer.B

Fri, 17 May 2024 07:53:43 GMT

Files that leverage an infected server to send email, usually for spam mail or to attract victims for phishing sites.

Spam:PHP/Mailer.Generic.B

Fri, 17 May 2024 07:53:43 GMT

Files that leverage an infected server to send email, usually for spam mail or to attract victims for phishing sites.

Spam:PHP/Email.Suspicious.A

Fri, 17 May 2024 07:53:43 GMT

Shell:PHP/Shell.Generic.A

Thu, 18 Jul 2024 15:15:03 GMT

Generic web shells

Spam:PHP/Mailer.Generic.A

Thu, 18 Jul 2024 15:15:03 GMT

Generic spam scripts

Generic:PHP/Proxy.Shell.A

Thu, 18 Jul 2024 15:15:03 GMT

Script that proxies access to a remotely hosted web shell

Phishing:PHP/Generic.A

Thu, 18 Jul 2024 15:15:03 GMT

Generic phishing script