what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Barry Weymes

CryptoPHP - Analysis Of A Hidden Threat Inside Popular Content Management Systems

Posted Nov 20, 2014

Authored by Barry Weymes, Maarten van Dantzig, Yonathan Klijnsma, Lennart Haagsma, Yun Zheng Hu

CryptoPHP is a threat that uses backdoored Joomla, WordPress, and Drupal themes and plug-ins to compromise webservers on a large scale. By publishing pirated themes and plug-ins free for anyone to use instead of having to pay for them, the CryptoPHP actor is social engineering site administrators into installing the included backdoor on their server.

tags | paper

SHA-256 | c7dfe85cde25dbe5c269bd310b1cfea91ea45e7b76f3c8eb974764ac3d6e7fca

Download | Favorite | View