Comment by TaLiTr

> I have never seen an automated attack on a PHP application that has bothered to hide its traces.

I'd agree with that sentiment, most of those scripts are the laziest they can be.

But I can't help but wonder if there's survivor bias going on there.