Securonix Threat Labs has released new research on ‘TRUST#GRAFT,’ a JavaScript-to-WordPress attack chain that turns a trusted administrator browser into the deployment path for a persistent backdoor.
Rather than bypassing WordPress authentication, TRUST#GRAFT abuses an existing admin session to upload and activate a malicious plugin disguised as Web Media Optimizer, which establishes persistence and hides from normal plugin views.
You can read more here: https://www.securonix.com/blog/trust-graft-wordpress-admin-php-backdoor/
Related
This entry was posted on October 22, 2026 at 1:32 pm and is filed under Commentary with tags Securonix. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Securonix Uncovers WordPress Attack Chain Abusing Trusted Admin Sessions
Securonix Threat Labs has released new research on ‘TRUST#GRAFT,’ a JavaScript-to-WordPress attack chain that turns a trusted administrator browser into the deployment path for a persistent backdoor.
Rather than bypassing WordPress authentication, TRUST#GRAFT abuses an existing admin session to upload and activate a malicious plugin disguised as Web Media Optimizer, which establishes persistence and hides from normal plugin views.
You can read more here: https://www.securonix.com/blog/trust-graft-wordpress-admin-php-backdoor/
Share this:
Like this:
Related
This entry was posted on October 22, 2026 at 1:32 pm and is filed under Commentary with tags Securonix. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.