text: Threats such as this can be difficult to detect even with multiple security layers — especially if they are not consolidated.   In this blog, we will dissect a targeted attack that made use of the Chopper ASPX web shell (detected by Trend Micro as Backdoor.ASP.WEBSHELL.UWMANA).  Technical Analysis