Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers
Cookie-gated PHP web shells enable persistent Linux RCE via cron-based re-creation, reducing detection in routine traffic logs.
More info