DEWMODE.Web.Shell

description-logoDescription

This indicates an attempt to use DEWMODE Web Shell or indication of presents of traffic related to DEWMODE Web Shell.
A web shell is a malicious script, acting as a backdoor, that can be uploaded to a web server to enable remote administration of the machine. Web shells are often installed by attackers through web application vulnerabilities or configuration weaknesses.

affected-products-logoAffected Products

Any compromised server

Impact logoImpact

System Compromise: Remote attacker can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Remove the malicious file from the server.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2021-03-23 18.043 Default_action:pass:drop
2021-03-11 18.034