Trusted Design

Compromised Wordpress sites serving multiple malware payloads

概要

Created: 2026-02-23

Indicators

• FileHash-MD5 - bea9be813bb7df579d5be3e4543dc6a4 -
• URL - tusengangerstarkare.ingelaclarin.se/wp-admin/1.php?r -
• URL - kba1f9684c70.nazwa.pl/images/1.php?r -
• URL - thefoodstudio.co.nz/wp-content/themes/food-cook/1.php?r -
• URL - core.is/1.php?r -
• URL - linkleads.vn/1.php?r -
• URL - dlaciebie.org/wp-admin/1.php?r -
• URL - matthewkarant.com/wp-content/themes/twentynine/1.php?r -
• URL - odelia-coaching.co.il/wp-content/plugins/google-sitemap-generator/1.php?r -
• FileHash-MD5 - 8f00cfdf067b01462670212ba5874cdb -
• FileHash-MD5 - 6696527bfda97b1473d1047117ded8d6 -
• URL - beta.pescariusports.ro/images/1.php?r -
• URL - merklab.eu/1.php?r -
• URL - youreverlastingmemories.co.uk/1.php?r -
• FileHash-MD5 - ec35acdbe331c73e5e6883ebc08f896d -
• URL - alzina.cat/1.php?r -
• URL - thietkekientruca4.vn/1.php?r -
• URL - mlmassagetherapy.com.au/wp-content/uploads/1.php?r -
• URL - monitoring.sensomedia.hu/1.php?r -
• URL - livedoor.eu/1.php?r -
• URL - pms.isovn.net/images/1.php?r -
• URL - couponshare.me/1.php?r -
• FileHash-MD5 - 6bb3b23ff3e736d499775120aa8d6ae2 -
• URL - bernie.jshall.net/wp-content/themes/twentytwelve/1.php?r -
• URL - newwww.r11mis.be/images/1.php?r -
• URL - bankruptcy-software.com/wp-content/themes/classic/1.php?r -
• URL - osp.ruszow.liu.pl/images/1.php?r -
• hostname - o3qz25zwu4or5mak.tor2web.org -
• URL - architecture.web.auth.gr/1.php?r -
• URL - blog.topdealslondon.com/wp-content/uploads/1.php?r -
• URL - twobyones.com/1.php?r -
• URL - ludovicharollais.org/wp-admin/1.php?r -
• URL - apsmiles.com/wp-content/themes/rfx/1.php?r -
• URL - blog.ridici-jednotky.cz/wp-content/plugins/simple4us/1.php?r -
• URL - salihajszalon.hu/1.php?r -
• URL - sonicboommusic.com.au/components/com_banners/1 -
• URL - thebestcookbooks.co.uk/wp-content/plugins/1.php?r -
• URL - airlessspraysupplies.com/wp-includes/1.php?r -
• FileHash-MD5 - 1159fe7ec4d0b2cfde57dfb28b98f0c9 -
• URL - turbomarketingteam.com/1.php?r -
• URL - dannygill.co.uk/wp-content/plugins/simple4us/1.php?r -
• FileHash-MD5 - 2f225283c66032c9f7dcb44f42697246 -
• URL - geototal.az/en/ru/engine/editor/scripts/common/codemirror/mode/xml/1.php?r -
• FileHash-MD5 - 038710b2029046c39ca4082e2c34f9b3 -
• FileHash-MD5 - 93babef06bfd93bcbb5065c445fb57d4 -
• URL - blackwellanddenton.com/components/com_contact/1 -
• URL - cartorioalbuquerque.com.br/images/1.php?r -
• URL - m11.mobi/images/1.php?r -
• URL - augustgifford.com/wp-admin/1.php?r -
• hostname - tusengangerstarkare.ingelaclarin.se -
• URL - redmine.sensomedia.hu/1.php?r -
• URL - prodvizhenie-sajta.com/images/1.php?r -
• URL - lionel.my/wp-content/plugins/akismet/1.php?r -
• URL - mitoyotaseagarrota.com/components/com_banners/1 -
• URL - xhmeiastokyma.gr/1.php?r -
• URL - tsv-penzberg.de/wp-admin/1.php?r -
• URL - climatechange.mobi/images/1.php?r -
• URL - angeladoesfood.com/wp-admin/1.php?r -
• URL - altero.be/1.php?r -
• URL - treasurething.com/wp-includes/pomo/1.php?r -
• URL - sparkledesign.ro/1.php?r -
• URL - mcymbethel.com.ar/modules/mod_ariimageslider/1 -
• URL - longboardsicecream.com/wp-content/plugins/1.php?r -
• hostname - o3qz25zwu4or5mak.tor2web.ru -

類似Pulses

• Thousands of compromised WordPress websites redirect to exploit kits (score: 0.74)
• Fake WordPress Site Receiving credentials from malware (score: 0.71)
• WordPress Compromise Campaign (score: 0.70)
• Compromised WordPress sites redirect visitors to Nuclear EK (score: 0.66)
• [Warning] infection of new Linux / Mayhem malware (score: 0.66)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る