China.Chopper.Web.Shell.Client.Connection

Description

This indicates detection of the China Chopper Webshell which is a popular web shell tool used by Chinese Hacker.

Affected Products

Any compromised PHP server
Any compromised IIS server
Any compromised JSP server

Impact

System Compromise: Remote attacker can gain control of vulnerable systems.

Recommended Actions

If required, the signature's action can be set to "Block".
Use Anti-Virus software to scan and clean the system.

References