wmedia-recovery.php

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 26, 2026
Last mentioned4d ago

Timeline

1 articles · newest first

TRUST#GRAFT uses logged-in WordPress admins to install a PHP backdoor

The chain uploads wm.zip as Web Media Optimizer and copies itself to mu-plugins so deleting the visible plugin leaves it loaded.

GBHackersupdated Oct 27, 02:08 UTC · 4d agofirst Oct 26, 09:38 UTC · 4d agoMalware 2 sources1

Appears with

TRUST#GRAFTmalware · 1
WordPressproduct · 1
Securonixorganization · 1
Web Media Optimizerproduct · 1

Entities are extracted by the model from each article. First seen Oct 26, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.