https://www.systemtek.co.uk/2018/03/php-malware-disguised-as-ioncube-scripts/