ALFA TEaM v4.1 Web Shell New Features
A new PHP web shell by ALFA TEaM that has some interesting new features like the ability to create a cPanel phishing page that blocks the victim from a part of their website until they interact with the phishing page.
SCP-173 PHP Malware + WordPress
An interesting code comment, scp-173, with meme origins has been found in various PHP malware targeting WordPress websites throughout 2020.
Plugin Killer: WordPress Malware Disables Security Plugins
A malicious PHP file that was disabling common WordPress security plugins before injecting SEO spam onto the infected website.
wp_uploader.php: Simple and Effective Uploader
It takes less than 100 characters of PHP code to create an uploader that can be placed on a compromised website to act as a backdoor.