WordPress Backdoor Uses Ethereum Smart Contracts to Hide Command-and-Control Servers

The malware, found during a site cleanup in mid-June, disguises itself as a legitimate must-use plugin and includes several mechanisms to survive removal. Must-use plugins automatically load on every WordPress request and cannot be disabled through the normal Plugins dashboard. The malware abuses this feature to remain active while hiding from the... Weiterlesen