Trojan shell script

Trojan shell script

Published on 2008-04-11. Updated on 2009-03-28.

Description:
A trojan shell script has been found. This is a tool used by attackers to execute arbitrary shell commands or browse the filesystem on a remote webserver. Usually, this is an indication that your website has been defaced and some attacker has installed this shell script to manage the webserver from remote.

Impact:
An attacker can execute arbitrary shell commands in the context of the webserver process.

Recommendation:
Delete the trojan shell script. You need to investigate the security of your website to determine the source of the security breach.

Tags: Scripts

Alert Tags: malware
ApplicableApplicationServer : All
ApplicableOS: All
ApplicableWebServer: All

References:

  • rst57shell
  • nstView
  • c99shell

  • Go Back