Over 2,000 Wordpress websites are addicted to malware.

Over 2,000 Wordpress websites are addicted to malware. Steam comments have been found as the main channel for embedding malware.

According to a report by the website SCWorld, a research team from GoDaddy, a popular Domain distributor, has detected a malware distribution campaign targeting a website built on Wordpress's platform, which has 1,980 victimized websites around the world, which the research team first detected in July 2025. 2568) According to the review, it is estimated that the website may have been infected with early malware (Initial Infection) through Theme and Plug-In themes with latent malware, from stolen passwords, that hackers may have secretly embedded malware on the site, or that the active tools on the site were attacked by supply chain attack methods.

But in the next order, this is an interesting way for malware to decode a payload hidden within a harmless comment on a post inside the user profile of the Steam platform, the most popular video game sales platform of the gamer. These comments are actually packaged in Unicode characters that cannot be seen. Once decoded, it becomes a Pointing URL to a JavaScript script embedded within a library (Library) that is secretly on the victim's website after malware addiction on the first layer by Chris. This malware will launch a backdoor type of malware into the victim's website. This malware will respond to POST requests related to the Cookies file for authentication, allowing the malware to receive encrypted PHP codes based on Base64. In addition, the research team also found that the malware has also used a strategy to evade the protection system by using a string value to bounce the Obfuscation and naming random functions.

Website Administrator can protect the website by checking for Steam Community-related URLs, suspicious JavaScript that have been shot on the site, and Outbound Connection that connects to the hello-mywordl [.] info domain. If detected, the research team recommends that the website be restored using the latest backup that remains secure immediately.

# Trending # lemon 8 diary # lemon 8 diary # Wordpress # stream