Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kdharan
Staff
Staff

Backdoor.PHP.DEFACER.B|| ips signature

on of my client was doing the the security test on his environment . when he tested the Threat : Backdoor.PHP.DEFACER.B on firewall is passing through . My client asked that where can we find the IPS signature regarding this

i have shown the 2 possibilities
1) on the firewall security profile >> ips signature >> in search for the signature

 

2) check the signature on the fortiguard portal with the below link

https://www.fortiguard.com/search?q=Backdoor.PHP.DEFACER.B&engine=1

 

i don't find any signature related to Backdoor.PHP.DEFACER.B , with exact match

apart from the above 2 methods is there any other way to check the IPS signature .

actually requirement of my query  is how to find the signature Backdoor.PHP.DEFACER.Bin our database


please find the below document regarding the Threat

https://www.trendmicro.com/vinfo/be/threat-encyclopedia/malware/Backdoor.PHP.DEFACER.B/

 

1 REPLY 1
AEK
Honored Contributor

@kdharan, if I understand well from Trend Micro this is a kind of malware, so instead of searching in IPS DB you may look from Antivirus side.

AEK
AEK
Labels
Top Kudoed Authors