Attackers are using SQL triggers as a backdoor to create a malicious admin user whenever a special comment is submitted to an infected WordPress website.

A malicious PHP file that was disabling common WordPress security plugins before injecting SEO spam onto the infected website.

A malware injection used to automatically inject a SuperAdmin user into the Prestashop _employees database table.

Magento’s continued migration from 1.x to 2.x versions has led malware authors to modify existing malicious tools to accomodate for the major differences between these Magento versions.