Backdoor.PHP.DEFACER.B|| ips signature

[kdharan]

on of my client was doing the the security test on his environment . when he tested the Threat : Backdoor.PHP.DEFACER.B on firewall is passing through . My client asked that where can we find the IPS signature regarding this

i have shown the 2 possibilities
1) on the firewall security profile >> ips signature >> in search for the signature

2) check the signature on the fortiguard portal with the below link

https://www.fortiguard.com/search?q=Backdoor.PHP.DEFACER.B&engine=1

i don't find any signature related to Backdoor.PHP.DEFACER.B , with exact match

apart from the above 2 methods is there any other way to check the IPS signature .

actually requirement of my query  is how to find the signature Backdoor.PHP.DEFACER.Bin our database


please find the below document regarding the Threat

https://www.trendmicro.com/vinfo/be/threat-encyclopedia/malware/Backdoor.PHP.DEFACER.B/

[AEK]

@kdharan, if I understand well from Trend Micro this is a kind of malware, so instead of searching in IPS DB you may look from Antivirus side.