Bart on Twitter: "Interesting. Webshell that was hosted on "Border Security Force of India" (see https://t.co/w0gH5fbXwc) is a typical WSO webshell, modified by "DrSpy". auth_pass decodes to "cyberrose", which is a Pakistani hacker group apparently. https://t.co/QJ7sL8omRj… https://t.co/TJEq2I7Kgq"

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

‏ @bartblaze

Interesting. Webshell that was hosted on "Border Security Force of India" (see https://twitter.com/malwrhunterteam/status/982536183849869312 …) is a typical WSO webshell, modified by "DrSpy". auth_pass decodes to "cyberrose", which is a Pakistani hacker group apparently. https://www.facebook.com/cyberros.official/ …pic.twitter.com/P6OdKVNxeY