SOCRadar details PEEP, a post-compromise toolkit that rides a fake bookmarks extension from the browser out to host-level command execution.
Two new Windows trojans pull their next commands straight from FTP server banners in a first-seen delivery trick.
WP-SHELLSTORM crew exposed after leaving server open, revealing 1.4M site targets and mass webshell operations