Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments