F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
F5 BIG-IP malware injects a PHP web shell into memory, leaving targeted scripts unchanged on disk while commands run through web requests.
More info