SYMBOLCOMMON_NAMEaka. SYNONYMS
php.parrot_tds_shell (Back to overview)

Parrot TDS WebShell


In combination with Parrot TDS the usage of a classical web shell was observed by DECODED Avast.io.

References
2025-08-06 ⋅ Silent Push ⋅ Silent Push
Unmasking SocGholish: Silent Push Untangles the Malware Web Behind the “Pioneer of Fake Updates” and Its Operator, TA569
FAKEUPDATES MintsLoader Parrot TDS Parrot TDS WebShell Raspberry Robin
2024-01-19 ⋅ paloalto Networks Unit 42 ⋅ Ben Zhang, Billy Melicher, Bo Qu, Brad Duncan, Qi Deng, Zhanglin He
Parrot TDS: A Persistent and Evolving Malware Campaign
Parrot TDS Parrot TDS WebShell
2022-04-07 ⋅ Avast Decoded ⋅ Jan Rubín, Pavel Novák
Parrot TDS takes over web servers and threatens millions
FAKEUPDATES Parrot TDS Parrot TDS WebShell NetSupportManager RAT

There is no Yara-Signature yet.