Sunday, May 4, 2025
HomeBackdoorHackers Hidden Backdoor Inside of Malicious WordPress Security Plugin

Hackers Hidden Backdoor Inside of Malicious WordPress Security Plugin

Published on

SIEM as a Service

Follow Us on Google News

Hacker Hide the PHP Backdoor Inside of the WordPress Security Plugin called X-WP-SPAM-SHIELD-PRO” code and it contains Legitimate Plugin Name but it has Hidden Backdoor and Performing some Dangerous Malicious Activities.

This Fake Malicious Plugin Use the Reputation of WP-SpamShield and Pretend as a Legitimate one. But it has noting to do with its offering Futures that say to Protect From Spams.

This Plugin can do some very Dangerous Activities Such as the ability to create his own admin account on the site, upload files on the victim’s servers, disable all plugins, and more.

- Advertisement - Google News
 

Recent Days Many Malicious WordPress Plugin’s are Evolving and Distributing with Highly Sophisticated Malware and Performing Malicious Activities with Installing Website.

These Hidden backdoors are allow anything to Upload into your site and This will be one the Best Hacking Method form Hackers that leads to  Compromise your Entire Website.

Also Read : WordPress plugin Gaint BestWebSoft’s 53+ Plugin’s Vulnerable to Multiple Cross Site Scripting (XSS)

How Does This WordPress Security Plugin Works

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Claude AI Abused in Influence-as-a-Service Operations and Campaigns

Claude AI, developed by Anthropic, has been exploited by malicious actors in a range...

Threat Actors Attacking U.S. Citizens Via Social Engineering Attack

As Tax Day on April 15 approaches, a alarming cybersecurity threat has emerged targeting...

TerraStealer Strikes: Browser Credential & Sensitive‑Data Heists on the Rise

Insikt Group has uncovered two new malware families, TerraStealerV2 and TerraLogger, attributed to the...

MintsLoader Malware Uses Sandbox and Virtual Machine Evasion Techniques

MintsLoader, a malicious loader first observed in 2024, has emerged as a formidable tool...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Lazarus Hackers Tamper with Software Packages to Gain Backdoor Access to the Victims Device

A recent investigation conducted by STRIKE, a division of SecurityScorecard, has unveiled the intricate...

Juniper Routers Exploited via Magic Packet Vulnerability to Deploy Custom Backdoor

A sophisticated cyber campaign dubbed "J-magic" has been discovered targeting enterprise-grade Juniper routers with...

QSC: Multi-Plugin Malware Framework Installs Backdoor on Windows

The QSC Loader service DLL named "loader.dll" leverages two distinct methods to obtain the...