Tag: Web Shell

Monochrome green illustration of a tile grid with two tiles misaligned and light leaking through
CSBadmin

Two WordPress plugin bugs let attackers plant web shells

Wordfence and Defiant detail critical flaws in WooCommerce Wholesale Lead Capture and The Events Calendar, both reachable without credentials.

A fileless rootkit dubbed PoisonedRefresh injects PHP web shells into the memory of compromised F5 BIG-IP APM appliances.
CSBadmin

PoisonedRefresh rootkit keeps F5 web shells invisible to disk scans

A fileless rootkit dubbed PoisonedRefresh injects PHP web shells into the memory of compromised F5 BIG-IP APM appliances.

CSBadmin

Clop’s bespoke shell empties Windchill keystores and vault maps

Clop's bespoke Windchill web shell decrypts keystore credentials and maps vaults for mass exfiltration.

CSBadmin

Hidden Backdoor Attack Targets Three Popular WordPress Plugins

Attackers tampered with JavaScript files for three popular WordPress plugins, creating hidden admin accounts and web shells only when site…