China.Chopper.Web.Shell.Client.Connection
Description
This indicates detection of the China Chopper Webshell which is a popular web shell tool used by Chinese Hacker.
Affected Products
Any compromised PHP server
Any compromised IIS server
Any compromised JSP server
Impact
System Compromise: Remote attacker can gain control of vulnerable systems.
Recommended Actions
If required, the signature's action can be set to "Block".
Use Anti-Virus software to scan and clean the system.
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |