.

Lovealihack

<<

SephStorm

User avatar

Hero Member
Hero Member

Posts: 621

Joined: Sat Apr 17, 2010 12:12 pm

Post Tue Jan 27, 2015 1:21 pm

Lovealihack

Hey all,

I've seen some attempts to upload php files to a webserver. many of the attempts contain code referencing lovealihack. I'm certain this is a scripted attack, some tool or script that can be downloaded, I'm wondering if anyone else knows where I can find it?

This thread references the attack, (http://stackoverflow.com/questions/3597 ... -a-php-scr)
sectestanalysis.blogspot.com/‎
<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 459

Joined: Thu Mar 03, 2011 3:54 am

Post Tue Jan 27, 2015 4:10 pm

Re: Lovealihack

Are you curious if it was successfully uploaded and need to find it locally? Or are you wanting to find a sample to analyze? I'm assuming the latter... You could wget it from one of the sources trying to upload it.
<<

SephStorm

User avatar

Hero Member
Hero Member

Posts: 621

Joined: Sat Apr 17, 2010 12:12 pm

Post Sat Jan 31, 2015 1:00 pm

Re: Lovealihack

Well, there's no indication of a successful attack.

I'd like to grab the file, run it in an isolated environment, and lean as much as I can about it.

I'll talk to one of our guys, see if that is an option.
sectestanalysis.blogspot.com/‎

Return to Malware

Who is online

Users browsing this forum: No registered users and 1 guest

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software