Filtered by tag: blockchain × Clear
SC WordPress Malware: A Self-Healing Mesh of Loaders, Drop-Ins, and a Blockchain-Controlled Backdoor
Matched: WordPress
A WordPress malware family dubbed "SC" persists by storing payloads across at least eight locations simultaneously — files, database, and shared memory — with each copy capable of rebuilding the others. This makes simple file deletion ineffective, as the backdoor returns within seconds. Notably, it uses blockchain data to control its backdoor, making command infrastructure difficult to block or take down.
Inside a Malicious, Stealthy WordPress Must Use Plugin
Matched: WordPress
Wordfence researchers identified sophisticated WordPress malware installed as a must-use plugin, disguised as a health-check tool. It uses custom string obfuscation, hides itself from the dashboard, creates concealed administrator accounts, harvests plaintext passwords, and spreads to other WordPress installations on the same server. Its command channel uses EtherHiding, reading attacker server addresses from Ethereum smart contracts, making takedown difficult. The malware exfiltrates payment credentials, admin sessions, and WooCommerce data, and can remotely update itself, remove plugins, or inject JavaScript. Detection signatures were released June 23, 2026.