Netskope Threat Labs

MALWARE-CNC Php.Webshell.Agent outbound connection

IPS-SWG

2 SIDs: 61493, 61494

Detects webshell activity on a compromised server associated with the Php malware family.