Stealthy Malware Disguises Itself as a WordPress License Key

guest · Jan 30, 2019

Stealthy Malware Disguises Itself as a WordPress License Key
A spam injector hides in plain site within WordPress theme files
January 30, 2019
https://threatpost.com/malware-wordpress-license-key/141315/

A spam-injecting malware is targeting WordPress site owners by disguising itself as a legitimate license key for a WordPress design theme.

According to analysis from Sucuri, a customer opened a malware removal ticket reporting “some weird spam URLs injected onto their WordPress website.” After further investigation into the files on the website, analysts uncovered a hidden encoded spam injector malware in the “./wp-content/themes/toolbox/functions.php” WordPress theme, masquerading as a license key.

“A license key is a place where a webmaster might not expect to find an infection,” said Moe Obaid, security analyst at Sucuri, in a Wednesday post.
Interestingly, in addition to targeting a normally non-suspicious file, the attacker didn’t apply that much encoding to obfuscate the code – meaning that it essentially hides in plain sight.
Click to expand...

Log in or Sign up

Stealthy Malware Disguises Itself as a WordPress License Key

guest Guest

Log in or Sign up

Stealthy Malware Disguises Itself as a WordPress License Key

guest Guest

Useful Searches