Tag: persistent threat

2 Attack Reports | 0 Vulnerabilities

Attack reports

Significant Risk and Proactive Defense

A comprehensive analysis reveals a substantial threat posed by domains linked to Salt Typhoon and UNC4841, likely China-associated cyberespionage actors. The investigation uncovered a larger network of domain names beyond those publicly known, indicating a pattern of long-term access and sophistica…
cyberespionage
telecommunications
persistent threat
domain infrastructure
2025-09-08
long-term access
Published: September 8, 2025
Downloadable IOCs: 47

PHP Reinfector and Backdoor Malware Target WordPress Sites

A sophisticated PHP reinfector and backdoor malware is targeting WordPress websites, infecting plugin files and database tables. The malware reinfects active plugins, manipulates wp_options and wp_posts tables, and creates malicious admin users. It utilizes WordPress's cron system to maintain contr…
backdoor
obfuscation
wordpress
php
2024-11-14
vextrio
database manipulation
backdoor malware
persistent threat
php reinfector
plugin infection
reinfector
cron system
Published: November 14, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports