Cunning WordPress malware disguises itself as regular code

guest · Aug 19, 2021

Cunning WordPress malware disguises itself as regular code
August 19, 2021
https://www.techradar.com/news/cunning-wordpress-malware-disguises-itself-as-regular-code

Cybersecurity experts have identified a novel approach to disguising WordPress security threats that involves generating malware on the fly with legitimate-looking code.

In a blog post, Ned Andonov, a WordPress security expert at Wordfence, shares details about a simple but effective obfuscation technique, which due to its unique characteristics doesn’t carry any of the usual detectable patterns.

“The code abstraction looked almost perfect, each class method was well commented, the business logic looked reasonable, and the code was following the latest code quality standards,” writes Andonov.
Click to expand...

And that’s not all. The code also extracts compressed malware from inside a PNG image.

Andonov opines that the malware is professionally written and contains “a collection of remote commands including code execution, updates, and files access.”
Click to expand...

Wordfence: WordPress Malware Camouflaged As Code

In today’s post we discuss emerging techniques that attackers are using to hide the presence of malware. In the example we discuss below, the attacker’s goal is to make everything look routine to an analyst so that they do not dig deeper and discover the presence of malware and what it is doing. We describe how this technique works, and we touch on the psychological underpinnings of the technique the attacker is using.
Click to expand...

EASTER · Aug 19, 2021

And that’s not all. The code also extracts compressed malware from inside a PNG image
Click to expand...

An age old trick which apparently still works.

Log in or Sign up

Cunning WordPress malware disguises itself as regular code

guest Guest

EASTER Registered Member

Log in or Sign up

Cunning WordPress malware disguises itself as regular code

guest Guest

EASTER Registered Member

Useful Searches