wp_uploader.php: Simple and Effective Uploader

It takes less than 100 characters of PHP code to create an uploader that can be placed on a compromised website to act as a backdoor.
Prestashop Backdoor - SuperAdmin Injector

A malware injection used to automatically inject a SuperAdmin user into the Prestashop _employees database table.
Spox Phishing Kit

Analysis of a phishing kit and its admin panel used for managing phishing pages that target Chase Bank and other organizations. The kit was created by ‘Spox’.