LOL: BabaYaga WordPress Malware Updates Your Site

guest · Jun 8, 2018

LOL: BabaYaga WordPress Malware Updates Your Site
June 7, 2018
https://www.bleepingcomputer.com/news/security/lol-babayaga-wordpress-malware-updates-your-site/

Security researchers have spotted a malware strain targeting WordPress sites that includes some pretty clever self-preservation techniques, such as removing competing malware and updating the victim's site.
BabaYaga - Russian malware used for SEO spam
The group behind BabaYaga —believed to be Russian-speaking hackers— uses this malware to inject sites with special keyboards to drive SEO traffic to hidden pages on compromised sites. These pages are then used to redirect users to affiliate marketing links, where if the user purchases advertised goods, the hackers also make a profit.
BabaYaga updates or reinstalls WordPress sites
But the things that stood out the most from BabaYaga's modus operandi are two functions that will update/reinstall a victim's site and remove competing WordPress malware.

All in all, in Defiant's own words, "BabaYaga is an emerging threat that is more sophisticated than most malware."
Click to expand...

Log in or Sign up

LOL: BabaYaga WordPress Malware Updates Your Site

guest Guest

Log in or Sign up

LOL: BabaYaga WordPress Malware Updates Your Site

guest Guest

Useful Searches