molotovbliss · March 29, 2016 19:54
diff --git a/mage.jpg.sh b/mage.jpg.sh
 # Locate malware storing credit card info in images, original source:
 # http://blog.foregenix.com/magento-malware-alert-mage.jpg-malware-derivative

 find . -type f -exec egrep -Hl "md5\(md5\(microtime\(\)\)\.rand\(\)\)|\@file_put_contents\([^,]+,'JPEG-1\.1'\.base64_encode\([^\)]+\),FILE_APPEND\)" {} \;
	# Locate malware storing credit card info in images, original source:
	# http://blog.foregenix.com/magento-malware-alert-mage.jpg-malware-derivative

	find . -type f -exec egrep -Hl "md5\(md5\(microtime\(\)\)\.rand\(\)\)\|\@file_put_contents\([^,]+,'JPEG-1\.1'\.base64_encode\([^\)]+\),FILE_APPEND\)" {} \;