WP-SHELLSTORM

Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites

A cybercrime group accidentally exposed its command-and-control server for three weeks, revealing tools, logs, and a target list of 1.4 million WordPress sites — though actual compromises were far fewer — enabling researchers to reverse-engineer the WP-SHELLSTORM backdoor operation.