1 files changed, 1 insertions, 0 deletions

diff --git a/malwares.yara b/malwares.yara
index 2aea966..1263b39 100644
--- a/malwares.yara
+++ b/malwares.yara
@@ -146,6 +146,7 @@ rule DangerousPhp
         $ = "xmlrpc_decode" fullword
         $ = "show_source" fullword
         $ = "pcntl_exec" fullword
+        $ = "array_filter" fullword
 
         $whitelist = /escapeshellcmd|escapeshellarg/