malware Shell:PHP/Shell.Generic.B

  • Resolved Essie

    (@de-webconnectie)


    2 years, 3 months ago

    Hi,
    Patchman detected this: malware?Shell:PHP/Shell.Generic.B, but I see no malware alerts when I scan the website with Wordfence. What is this kind of malware, how risky is it and why doesn;t Wordfence detect it?

    Thank you.

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @de-webconnectie, thanks for getting in touch!

    The alert you’re seeing looks to be for a PHP web shell backdoor may be present on your site. Without further information of the plugins and environment you’re running on, I’m unable to confirm anything just yet. Wordfence narrows-down whether you’re running a specific vulnerable version of a plugin, so it’s possible that you have a plugin installed that did have a vulnerability known by other plugins but has been patched. However, we can benefit from submissions from our community to confirm whether it’s something Wordfence should’ve picked up.

    Is there any mention of the affected file(s) and/or suggested action from Patchman? If so, you can provide the files and other relevant information to us so that we can check it out for you at samples @ wordfence . com.

    Please note that when making files available to us, ensure that you remove any database access credentials or keys/salts contained inside before sending.

    Thanks,
    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘malware Shell:PHP/Shell.Generic.B’ is closed to new replies.