Cybersecurity experts have revealed a fresh initiative aimed at WordPress platforms that conceals malware as a security plugin.
The plugin, known as “WP-antymalwary-bot.php,” includes numerous features to sustain access, remain undetectable from the admin dashboard, and perform remote code execution.
“It has a pinging capability that can relay information back to a command-and-control (C&C) server.”