SCP-173 PHP Malware + WordPress
An interesting code comment, scp-173, with meme origins has been found in various PHP malware targeting WordPress websites throughout 2020.
Magento PHP Injection Loads JS Skimmer
A JavaScript skimmer that conditionally loads from malicious PHP code injected into a Magento file.
AT&T Global Employee MFA Phishing
A phishing page targeting AT&T employee login credentials including various forms of multifactor authentication like MTIPS®, which was created for the US federal government.
Plugin Killer: WordPress Malware Disables Security Plugins
A malicious PHP file that was disabling common WordPress security plugins before injecting SEO spam onto the infected website.
Golang Stealthworker
A golang binary that is a stealthworker variant and being dropped onto web servers running vulnerable applications (CMS).