PHP-Antimalware-Scanner icon indicating copy to clipboard operation
PHP-Antimalware-Scanner copied to clipboard
verified publisher icon marcocesarato

PHP malwares hiding as CSS files

Open ebourg opened this issue 1 year ago • 1 comments

The scanner fails to detect PHP malwares hiding as CSS files. The filename follows the pattern: \.[0123456789abcdef]{8}\.(css|ccss), for example .dd8cff6b.css.

Once the extension is changed to .php the file is properly detected by the scanner.

ebourg avatar Jul 18 '24 08:07 ebourg

I tried the --scan-all option but the scanner crashed. Would it be possible to add .css files and hidden files to the set of files scanned by default?

ebourg avatar Jul 18 '24 09:07 ebourg