hard20 pts · first answer countsincident-responseeradicationroot-cause

Attacker back after the rebuild

You rebuilt a compromised web server from a clean image, but the same web shell appeared again two days later. What is the most likely gap?

A.The clean image must have been infected by the attacker last yearB.The original entry point, such as an unpatched app flaw, was not fixedC.Rebuilding servers never removes web shells, only antivirus doesD.The attacker is using a different server that has the same IP

Discussion 0

Join free to post in the discussion.

Attacker back after the rebuild

Discussion 0

Related questions