Only the Key Holder Can Drive It: A WordPress Backdoor in wp_options That Obeys RSA-Signed Commands
A WordPress backdoor in wp_options that runs only RSA-signed commands, pulls its C2 list from other hacked sites and hides in wp-admin. How it works and how to find it.
Read Article