A newly analyzed WordPress malware family, tracked as SC for the “SC_” markers embedded in its injected code, uses a self-healing persistence mesh that can restore a deleted backdoor within seconds. Researchers found that SC does not rely on a single web shell or plugin. Instead, the malware creates at least eight interdependent persistence... Weiterlesen: SC WordPress Malware Rebuilds Itself After Removal Using Database and…
Intelligence View
⚡ tsecurity.de Intelligence
SC WordPress Malware Rebuilds Itself After Removal Using Database and Memory Persistence
A newly analyzed WordPress malware family, tracked as SC for the “SC_” markers embedded in its injected code, uses a self-healing persistence mesh that can res…
Malware / Trojaner / Viren GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0011 · T1505
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1505TA0011 · Command and Control
Server Software Component
Mitigation: M1018 User Account Management
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Skanuj podpisy powłoki webshell za pomocą YARA / LOKI, sprawdź katalogi wysyłania za pomocą wykrywacza złośliwego php, utwardzaj wysyłanie plików i zachowuj minimalne konta.
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
9 źródeł
CVE-2025-63588 | CMSimple_XH CMSimpleXH cross site scripting
8 kolejnych źródeł
VVulDB Updatesvor 33 Min.CVE-2025-63307 | alexusmai laravel-file-manager 3.3.1 Content-Type cross site scripting VVulDB Updatesvor 33 Min.CVE-2025-63589 | CMSimple_XH 1.8 index.php cross site scripting VVulDB Updatesvor 33 Min.CVE-2025-63416 | SelfBest Platform 2023.3 Chat /admin/users cross site scripting VVulDB Updatesvor 33 Min.CVE-2025-55341 | Quipux up to 4.0.1 anexos/anexos_nuevo.php asocImgRad cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-8528 | Automated Logic WebCTRL up to 9.0 GET Parameter cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-44661 | PHPGurukul Online Shopping Portal 2.0 my-cart.php quantity cross site scripting
+2
8 źródeł
CVE-2025-54327 | Samsung Processor and Wearable Processor Exynos 1280/1380/2200 VTS input validation
7 kolejnych źródeł
VVulDB Updatesvor 1 Std.CVE-2025-27374 | Samsung Mobile Processor/Wearable Processor Exynos up to 9825 Secure Boot out-of-bounds write VVulDB Updatesvor 3 Std.CVE-2025-52512 | Samsung Mobile Processor Exynos 1580/2400/2500 HTS Driver Results denial of service VVulDB Updatesvor 3 Std.CVE-2025-52513 | Samsung Mobile Processor Exynos 1580/2400/2500 HTS Driver Results out-of-bounds write VVulDB Updatesvor 3 Std.CVE-2025-54334 | Samsung Mobile Processor Exynos up to 2500 NPU Driver __npu_vertex_bootup null pointer dereference VVulDB Updatesvor 3 Std.CVE-2025-54323 | Samsung Mobile Processor Exynos up to 2400 camera information disclosure VVulDB Updatesvor 3 Std.CVE-2025-54325 | Samsung Processor and Wearable Processor Exynos up to 2500 VTS Driver Results out-of-bounds
+1
6 źródeł
Nvidia to probe Jensen Huang’s affair with alleged Chinese spy
5 kolejnych źródeł
TTechnologyvor 9 Std.Nvidia opens investigation after report CEO Jensen Huang was target of foreign intelligence GGolem.devor 1 Std.Spionage-Affäre: Jensen Huang entschuldigt sich für Affäre und will Nvidia-Chef bleiben Tt3n.devor 2 Std.Nvidia-Chef Jensen Huang: Affäre mit mutmaßlicher chinesischer Spionin löst interne Untersuchung aus TThe Mac Observervor 2 Std.Nvidia CEO Jensen Huang Apologizes for Affair Amid Chinese Spy Allegations IIT Security Newsvor 3 Std.NVIDIA Investigates Suspected Foreign Espionage Campaign Targeting CEO Jensen Huang
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4221642/tkanka/sc-wordpress-malware-rebuilds-itself-after-removal-using-database-and-memory-persistence/