Other nomination

Cryptophp Backdoor

Swati Khandelwal · The Hacker News

CryptoPHP is a backdoor hidden inside pirated WordPress, Joomla and Drupal plugins and themes that administrators install for free. Once running on the server it gives its operators public-key encrypted command and control, email fallback, remote list updates and self-update, and is used mainly to inject black hat SEO content into the compromised sites.

Record

Researcher

Swati Khandelwal

Published by

The Hacker News

In the archive

• Nominated for the 2014 Top 10 Web Hacking Techniques

Related sources

• Original technical report

Tags

• supply-chain
• wordpress
• joomla
• drupal
• php
• case-study
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Swati Khandelwal, first published at the original source. Preserved copies are kept so the citation survives its host.