TF-MAL-php.parrot_tds_shell

Description

ThreatFox malware family `php.parrot_tds_shell`. Printable name: Parrot TDS WebShell.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Parrot TDS Malware Campaign Exploits Websites through ... - Advisories
  web:advisory.eventussecurity.com

  The insights provided by researchers contribute to the understanding of Parrot TDS and assist in developing strategies for detection and mitigation against this long-standing threat.

  2026-05-22 05:30 UTC
• Parrot TDS: Understanding the Payload Distribution
  web:cybernext.ai

  This blog explores the threat of Parrot TDS , a cyber campaign leveraging dynamic code injection into JavaScript on compromised sites to redirect visitors to phishing or malware . Learn about its methods, from exploiting CMS vulnerabilities to delivering malicious payloads, and discover actionable defenses for enterprises.

  2026-05-22 05:30 UTC
• Parrot TDS WebShell (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Parrot TDS WebShell Propose Change In combination with Parrot TDS the usage of a classical web shell was observed by DECODED Avast.io.

  2026-05-22 05:30 UTC
• Parrot TDS: A Persistent and Evolving Malware Campaign
  web:note.f5.pm

  A traffic direction system ( TDS ) nicknamed Parrot TDS has been publicly reported as active since October 2021. Websites with Parrot TDS have malicious scripts injected into existing JavaScript code hosted on the server.

  2026-05-22 05:30 UTC
• PDF Threat Intel Report Jun 18 - 24 - Red Piranha
  web:redpiranha.net

  Parrot TDS new cyber threat called Parrot TDS has infected over 16,500 websites, including university and government sites. This system redirects users to malicious campaigns like FakeUpdate, which tricks them into downloading remote access tools. Unlike prior threats, Parrot TDS targets a wider range of poorly secured websites, putting millions at risk. Researchers identified a surge in ...

  2026-05-22 05:30 UTC
• Parrot TDS: A Persistent and Evolving Malware Campaign - Unit 42
  web:unit42.paloaltonetworks.com

  Traffic detection system Parrot has infected tens of thousands of websites worldwide. We outline the scripting evolution of this injection campaign and its scope.

  2026-05-22 05:30 UTC
• Malicious web redirect scripts stealth up to hide on hacked sites
  web:www.bleepingcomputer.com

  Security researchers looking at more than 10,000 scripts used by the Parrot traffic direction system ( TDS ) noticed an evolution marked by optimizations that make malicious code stealthier against ...

  2026-05-22 05:30 UTC
• Millions at Risk As 'Parrot' Web Server Compromises Take Flight
  web:www.darkreading.com

  Millions at Risk As 'Parrot' Web Server Compromises Take Flight The cyberattackers behind the traffic redirection system ( TDS ) inject websites with malicious scripts, have control over thousands ...

  2026-05-22 05:30 UTC
• Parrot TDS Infects 16,500+ Websites for Malware Distribution
  web:www.sangfor.com

  Parrot TDS - Traffic Direction System infected 16,500+ websites for malware distribution. Here are recommendations and remediations by Sangfor.

  2026-05-22 05:30 UTC
• Hacked websites are being put at even greater risk by ... - TechRadar
  web:www.techradar.com

  Parrot TDS was first discovered in April 2022, by cybersecurity researchers from Avast. It was then said that the script was probably active since 2019, managing to infect more than 16,500 websites.

  2026-05-22 05:30 UTC

Only Available for Registered Users. Sign in to view.