Articles by tag: backdoor

Backdoor in WordPress plugins: C2 in Ethereum

Breakdown of attack on 30+ WP plugins: PHP deserialization, cloaking spam, persistent C2 in smart contract. Cleanup checklist and supply-chain protection. Check your site now.

Backdoor in wait4(): Linux kernel vulnerability

Analysis of a real backdoor in the Linux kernel from 2003: how an assignment error in wait4() opened root access. Lessons for developers: code review, Git, fuzzing. Study the details of the attack.