Trusted Design

Chinese threat actor - Wordpress exploits and PHP file dropper

概要

During a review of a client's systems I found evidence of a threat actor operating out of China that is apparently exploiting various Wordpress vulnerabilities in order to upload a PHP file dropper script. After uploading the file dropper the attacker then proceeds to upload HTML pages crafted to look like an online storefront.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Chinese Actors attacks on US Government and EU Media (score: 0.60)
• China-based Cyber Threat Group Targets Hong Kong Media Outlets (score: 0.60)
• Unusual Exploit Kit Targets Chinese Users (score: 0.59)
• Backdoor in Wordpress plugin (score: 0.58)
• Unusual Exploit Kit Targets Chinese Users,2 (score: 0.57)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る