topic Re: Accessing a specific website triggering Spyware THREAT signatures in General Topics

Accessing a specific website triggering Spyware THREAT signatures

Tanmoy — Fri, 13 Aug 2021 13:18:58 GMT

Accessing following website is generating Spyware THREAT signatures. Does this means website is compromised and access should be blocked?

Website:

Triggered signatures:

Suspicious PHP Command and Control Traffic Detection(85633)

Steganographic Webshell File Detection(85633)

rubber_ducky — Mon, 16 Aug 2021 05:48:15 GMT

There are many resources in the internet that you may use to check these websites or urls. You can use Palo Alto's url checker/ site tester too,

The ones that you have listed seem to have low risk but these have not yet been rated malicious. Location in China.

If not required for business you may check internally and have them blocked.