Web Shells – Threat Awareness and Guidance

ronjor · Nov 11, 2015

Original release date: November 10, 2015
Systems Affected
Web servers that allow web shells

Overview
This alert describes the frequent use of web shells as an exploitation vector. Web shells can be used to obtain unauthorized access and can lead to wider network compromise. This alert outlines the threat and provides prevention, detection, and mitigation strategies.

Consistent use of web shells by Advanced Persistent Threat (APT) and criminal groups has led to significant cyber incidents.

This product was developed in collaboration with US-CERT partners in the United Kingdom, Australia, Canada, and New Zealand based on activity seen targeting organizations across these countries. The detection and mitigation measures outlined in this document represent the shared judgement of all participating agencies.
Click to expand...

https://www.us-cert.gov/ncas/alerts/TA15-314A

Log in or Sign up

Web Shells – Threat Awareness and Guidance

ronjor Global Moderator

Log in or Sign up

Web Shells – Threat Awareness and Guidance

ronjor Global Moderator

Useful Searches