Strict Permissions on All Binaries are default, not optional.
Improve web wrapper filtering.
Add check for common signatures of an attack in the menu_router table.

Useful only until next menu cache clear/rebuild (or Redis restart) after the attack. This check runs daily and works only if _MODULES_FIX=YES in the /root/.barracuda.cnf file (this is default value)
Commons 3.19