May 2, 08:58 AM

MintsLoader Malware Uses Fake WordPress Plugins to Deploy GhostWeaver Trojan, Steal Data, and Cause AdSense Earnings Loss

Cybersecurity researchers have identified a new wave of attacks targeting WordPress sites through fake security plugins that grant attackers remote administrative access. These malicious plugins enable hackers to hijack websites, inject spam advertisements, steal credit card information, and reinstall themselves even after removal. Some victims have reported losing their AdSense earnings due to these intrusions. Additionally, a stealthy malware loader named MintsLoader is being used in phishing campaigns to deploy GhostWeaver, a persistent PowerShell-based trojan that steals browser data and hijacks systems. The attacks employ advanced tactics such as domain generation algorithms (DGA) and Transport Layer Security (TLS) to evade detection. This campaign operates covertly, injecting JavaScript dynamically and allowing attackers to regain administrator access at any time, thus posing a sustained threat to WordPress users and developers. Efforts to protect developer secrets are also being intensified as attackers increase their focus on these targets.

#WordPress #AdSense #MintsLoader #GhostWeaver #PowerShell #Transport Layer Security #JavaScript

Written with ChatGPT (GPT-4).

Sources

Additional media

Image #1 for story mintsloader-malware-uses-fake-wordpress-plugins-to-deploy-ghostweaver-trojan-71c43c75

MintsLoader Malware Uses Fake WordPress Plugins to Deploy GhostWeaver Trojan, Steal Data, and Cause AdSense Earnings Loss

Sources

Additional media

Similar Stories