Crooks spreads backdoor devised as a security WordPress PluginSecurity Affairs·Oct 1, 13:10 UTC · Oct 1, 2017Malware42
New WordPress Malware Masquerades as PluginInfosecurity Magazine·Apr 29, 16:45 UTC · Apr 29, 2025Malware42
Malicious Browser Extensions Infect Over 700 Users Across Latin America Since Early 2025The Hacker News·Jun 9, 12:16 UTC · Jun 9, 2025Malware30
150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling PlatformsThe Hacker News·Mar 27, 08:13 UTC · Mar 27, 2025Malware30
A School for Cybercrime: How to Become a Black HatKaspersky Securelist·Jan 16, 20:46 UTC · Jan 16, 2012Malware42
Kimsuky Hackers Spotted Using 3 New Android Malware to Target South KoreansThe Hacker News·Oct 26, 15:50 UTC · Oct 26, 2022Malware42
Notepad++ Plugins Allow Attackers to Infiltrate Systems, Achieve PersistenceInfosecurity Magazine·Sep 15, 17:28 UTC · Sep 15, 2022Malware42
Hackers Deploy Stealth Backdoor in WordPress MuThe Hacker News·Jul 24, 05:11 UTC · Jul 24, 2025Malware42
A backdoor in the popular Captcha Plugin poses serious risks to 300K WordPress sitesSecurity Affairs·Dec 20, 09:32 UTC · Dec 20, 2017Malware42
Google Chrome will freeze Flash content and ads from Sept 1stSecurity Affairs·Aug 29, 09:00 UTC · Aug 29, 2015Malware55
Threat actors actively exploit JetBrains TeamCity flaws to deliver malwareSecurity Affairs·Mar 20, 15:06 UTC · Mar 20, 2024Malware in the wildCVE-2024-27198CVE-2024-27199CVE-2024-2391760
Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flawHelp Net Security·May 31, 00:00 UTC · May 31, 2026Malware in the wildCVE-2026-45659CVE-2026-34926CVE-2026-3561660
Vereign offers the blockchain-powered solution for email securityHelp Net Security·Dec 7, 00:00 UTC · Dec 7, 2018Malware30
Abandoned Eval PHP WordPress plugin abused to backdoor sitesSecurity Affairs·Apr 22, 21:26 UTC · Apr 22, 2023Malware42
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ SitesThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2024MalwareCVE-2023-6000CVE-2024-2123CVE-2024-1071+1 CVEs47
Crooks exploit 0day in WordPress eCommerce plugin to upload a backdoorSecurity Affairs·Oct 18, 10:35 UTC · Oct 18, 2016Malware55
A New Trend in Android Adware: Abusing Android Plugin FrameworksPalo Alto Unit 42·Nov 1, 10:46 UTC · Nov 1, 2018Malware30
Binance's Smart Chain Exploited in New 'EtherHiding' Malware CampaignThe Hacker News·Feb 8, 10:02 UTC · Feb 8, 2024Malware30
Unveiling the Balada injector: a malware epidemic in WordPressSecurity Affairs·Jun 14, 11:13 UTC · Jun 14, 2023Malware42
Thousands of websites worldwide hijacked by cryptocurrency mining code due Browsealoud plugin hackSecurity Affairs·Feb 11, 22:46 UTC · Feb 11, 2018Malware30
Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and ThemesThe Hacker News·Jan 22, 07:39 UTC · Jan 22, 2022MalwareCVE-2021-24867CVE-2022-021847
⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and ZeroThe Hacker News·Jul 25, 08:27 UTC · Jul 25, 2026Malware in the wildCVE-2025-20286CVE-2025-49113CVE-2025-5419+8 CVEs60
Researchers Find Backdoor in School Management Plugin for WordPressThe Hacker News·May 21, 05:11 UTC · May 21, 2022Malware in the wildCVE-2022-160960
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot ChatsThe Hacker News·Jun 26, 07:08 UTC · Jun 26, 2026Malware in the wild160
Lazarus APT unveils fileless RAT designed to evade detectionSecurity Affairs·May 26, 08:33 UTC · May 26, 2026Malware42
RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent MalwareThe Hacker News·Nov 26, 08:28 UTC · Nov 26, 2025Malware55
WordPress Security Alert: New Linux Malware Exploiting Over Two Dozen CMS FlawsThe Hacker News·Jan 17, 12:32 UTC · Jan 17, 2023MalwareCVE-2016-10972CVE-2019-17232CVE-2019-1723347
Hackers Target Python Developers with Fake "CryticThe Hacker News·Jun 6, 05:49 UTC · Jun 6, 2024Malware30
Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress SitesThe Hacker News·Apr 28, 03:19 UTC · Apr 28, 2023Malware42
Attackers Using Obfuscation Tools to Deliver MultiThe Hacker News·Apr 10, 14:05 UTC · Apr 10, 2024Malware30
Researchers Uncover Malware Posing as WordPress Caching PluginThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2023Malware42
Backdoor slipped into multiple WordPress plugins in ongoing supplyArs Technica · Security·Jun 24, 21:00 UTC · Jun 24, 2024Malware42
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool InstallersThe Hacker News·Mar 31, 11:33 UTC · Mar 31, 2026Malware42
Gootkit delivery platform Gootloader used to deliver additional payloadsSecurity Affairs·Mar 1, 22:15 UTC · Mar 1, 2021Malware42
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on SitesThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026MalwareCVE-2026-1079547
APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace BackdoorThe Hacker News·Aug 29, 04:31 UTC · Aug 29, 2024MalwareCVE-2024-7262CVE-2024-726360