Signature Detail
Short Name |
HTTP:C99-SHELL-BACKDOOR1 |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
C99 Backdoor Actiivity1 |
Release Date |
2015/10/07 |
Update Number |
2543 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: C99 Backdoor Actiivity1
This signature detects access to the backdoor placed in the C99 PHP shell. It was found that the C99 PHP Shell that is used to backdoor web servers, has a backdoor itself. This signature indicates that someone is logging into a C99 shell using the backdoor.