OTX Threat: TRUST#GRAFT : JavaScript-Compromised Sites Target WordPress Admin Browsers to Deploy a Persistent PHP Backdoor
AI Summary
TRUST#GRAFT is a sophisticated attack chain that exploits authenticated WordPress administrator browser sessions to deploy persistent PHP backdoors. The attack begins with JavaScript loaders that present fake Cloudflare-style verification screens while performing browser fingerprinting, credential harvesting from browser storage, and environment profiling. The critical pivot occurs when the script
Discussion
Sign in to join the discussion.
Loading comments…