Re: [Security Weekly] identifying php based malware

2014-07-25 Thread Jim Halfpenny
Hi Robin, You might want to try sending it to a company that specialises in website malware like Sucuri (https://sucuri.net/). I'm not certain if they can help but they either might give you a quick answer or be interested in the sample for their own research. Jim On 18 July 2014 13:18, Robin Woo

Re: [Security Weekly] identifying php based malware

2014-07-25 Thread Himanshu anand
Hi, If possible then upload those script somewhere so others can also take a look and might able to help you. Regards, Himanshu Anand On Fri, Jul 18, 2014 at 5:48 PM, Robin Wood wrote: > I've got a client whose website has just been hacked by what looks like an > automated script which has dropp

[Security Weekly] identifying php based malware

2014-07-25 Thread Robin Wood
I've got a client whose website has just been hacked by what looks like an automated script which has dropped a single, very long, line of php at the start of every php file on the site. My guess is that a script got the FTP creds off a developer and used those to do the work but I'd like to know