Remote Code Execution Backdoor Uses Unicode Obfuscation & Non-Standard File Extensions

Readers of this blog will know that attackers are constantly finding new ways to hide their malware and avoid detection; after all, that’s what good malware does best! We have recently observed attackers leveraging both excessive amounts of unicode as well as peculiar includes and file extensions within their WordPress backdoors to conceal their malware and make it more difficult to find and detect.

In this post we’ll review what this malware does, what it looks like, and how to protect your website from this infection.

Continue reading Remote Code Execution Backdoor Uses Unicode Obfuscation & Non-Standard File Extensions at .