I found this backdoor on a client's website.
https://github.com/baogiaphucthinh/Malicious-php/blob/main/1259da6sc.php (original file)
I have gotten rid of it and realise it's an obfuscated script but how can I deobfuscate it in order to get to the root of this matter and understand the motive behind this attack better?
Thanks!