• Resolved Generosus

    (@generosus)


    Good Day,

    We would like to learn more about your malware definitions.

    For example, when your plugin generates the following messages:

    The issue type is: Backdoor:PHP/keeperpage.913
    Description: A backdoor known as keeperpage

    or

    The issue type is: IOC:TXT/ini.unsafe.10901
    Description: Configuration file used to override posting and upload restrictions

    Where can we find more information about “Backdoor: PHP/keeperpage.913” and “IOC:TXT/ini.unsafe.10901“?

    Thank you.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Thanks @generosus for highlighting that you’d like to know more about specific malware flagged in the plugin.

    I do think malware information would be an excellent addition to Wordfence Intelligence that currently has a search detailing known plugin vulnerabilities.

    I have forwarded the suggestion to the Threat Intelligence team as they would be in charge of gathering the data, so it’s always good to know customer demand for such a feature.

    Thanks,
    Peter.

    Thread Starter Generosus

    (@generosus)

    Hey @wfpeter,

    Thanks for the quick reply.

    It would be helpful if Team Wordfence can add the malware message definitions to the table your shared — or — create a new table with its own link (preferred).

    Again, thank you.

    Plugin Support wfpeter

    (@wfpeter)

    I have forwarded your thoughts on the above. As ever I can’t elaborate on a potential schedule, but we do like the idea of being able to link to those directly from scan results in the future.

    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Malware Definitions List | Can’t Find It’ is closed to new replies.