Filtered by category: Hacker News, tag: malware × Clear
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
Matched: WordPress
Researchers have uncovered a WordPress backdoor dubbed "SC" that uses multiple persistence mechanisms — including files, the database, and shared memory — to reinstall itself after removal. Dubbed a "self-healing mesh" by Sucuri, the malware uses the SC_ markers in injected content and is designed to survive cleanup attempts by rebuilding itself through redundant infection vectors.
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Matched: WordPress
A cybercrime operation called StopAndProtect has compromised nearly 2,000 WordPress sites to distribute malware and collect stolen data. Rather than using a single malware strain, the campaign deploys a full toolkit of criminal software, using the hacked sites as infrastructure to spread infections, control compromised systems, and store stolen documents, screenshots, and activity logs.