Template Label Nama Anak Software Manual Input For

It can remotely control a system and accept commands to run on the infected machine.

It is capable of scanning servers for the presence of other webshells, defacing websites, sending mass emails, downloading remote files, disclosing information about the affected server, brute-force attacks against file transfer protocol (FTP), cPanel, and Telnet, overwriting files with specified extensions, and more.

For authentication, the malware displays a Not Found page with a hidden login form as seen in the next two figures.

The malware creates a directory called toolsensikology to store these tools.

Template Label Nama Anak Software Manual Input For

However, instead of using a hardcoded list, it accepts manual input for files to be searched for.

A common method to deploy web shell is exploiting web application vulnerabilities or gaining access to an already compromised server.

Additionally, Ensiko has ransomware capability to encrypt files on an infected web server using the RIJNDAEL encryption algorithm.

It is also capable of scanning servers for the presence of other web shells, defacing websites, sending mass emails, downloading remote files, disclosing information about the affected server, gaining access to databases, running brute-force attacks against file transfer protocol (FTP), cPanel, and Telnet, overwriting files with specified extensions, and more.