How malwares actually look of PHP Sites
- سُلَيْمَان بْن دَاوُوْد

- Jan 5, 2025
- 2 min read
I am adding few sample screen shots of how actually malwares look like in code of commonly affected sites
Following is search engine malware that is used for SEO poisoning and redirecting to some another file that is in fact redirecting to other servers as following code redirects to index_backup.php whose code is just below.


Following is malicious script that breaks up your entire security of site

Following is a ZEND framework hack this hack creates an null admin in wordpress so after you remove these codes make sure you remove the default null admin user from wordpress databse from wp-users table
and also this following code is used to do a mail theft on your server which means using your site as mediator to send spam emails


Following is example os such a malware that site owner themselves become confused whether this is needed or not needed for our website this is simply used to send spam emails across several servers by using potential server as vector for serving mail resulting in email quota theft


Following is most common type of Malware in wordpress sites




A sample of JavaScript file affected with malware below

Adware Malware for advertizing about cialis and viagra

Following Type of malware is used to spread face book malware serving any site as vector say like posting obscene pics of a girl so when people hit those links the image is served from one website but maliciously spreads those images to large no of user base resulting in high CPU usage ( CPU seconds used in the past hour: 12365.6699999912, 344% CPU ) on server from where file is being served example below

the default.jpg used was and resulting facebook malware appeared as


Following malware code goes on creating folders on your server directories

Comments