Signature Detail

TROJAN: Linux/Cdorked Infected Web Server

This signature detects a response to an attacker's request for information from an infected Linux\Cdorked web server. The destination IP is infected with Linux/Cdorked and should be investigated immediately.

References

• URL: http://www.eset.com/ph/about/press/articles/article/eset-and-sucuri-uncover-linuxcdorkeda-apache-webserver-backdoor-the-most-sophisticated-ever-affecting-thousands-of-web-sites/