> TritonInfoSec News
Home / Jul 11, 2026 / Story
0
#3 The Hacker News general July 10, 2026 at 11:30 UTC

Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites

By [email protected] (The Hacker News)

AI Summary

A cybercrime crew tracked as WP-SHELLSTORM left an exposed server online for three weeks, revealing tools and target lists naming over 1.4 million WordPress sites, with confirmed backdoor installations across a subset of targets. The exposed server provided researchers a rare inside view of how mass WordPress compromise operations are structured and automated.

Read full article → https://thehackernews.com/2026/07/exposed-hacker-s…

Relevance score: 82.0/100

# More from July 11

  1. 1
    URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat The Hacker News
  2. 2
    Progress urges ShareFile admins to shut down servers over “credible” threat BleepingComputer
  3. 4
    Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks The Hacker News
  4. 5
    Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access The Hacker News
  5. 6
    Hackers exploit critical auth bypass in Gitea Docker image BleepingComputer
  6. 7
    Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot The Hacker News
  7. 8
    Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets The Hacker News
  8. 9
    Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking The Hacker News
  9. 10
    Microsoft Patches Defender ‘RoguePlanet’ Vulnerability SecurityWeek