Tag: wpeeper

1 Attack Reports | 0 Vulnerabilities

Attack reports

Playing Possum: What's the Backdoor Up To?

This report analyzes the Wpeeper backdoor targeting Android systems. Wpeeper utilizes compromised WordPress sites as relay C2 servers to hide its true C2. It uses HTTPS requests with Session fields to differentiate command types. Commands are encrypted with AES and signed to prevent takeover. Wpeep…
backdoor
android
2024-05-03
wpeeper
Published: May 3, 2024
Downloadable IOCs: 98
Click here to see more Attack Reports