WordPress malware campaign hides payloads in Steam profiles By Bill Toulas June 1, 2026 01:04 PM Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control C2 data. …
… It retrieves a command-and-control C2 address via “dead-drop” URLs using public services like Telegram bots and Steam profiles, a tactic that has been widely used in the past but which remains effective . …
… Telemetry data from cybersecurity company McAfee shows that WeedHack has impacted 116,464 systems, averaging between 2,000 and 3,000 infections every day. …
… Get the whitepaper Related Articles: Telegram Mini Apps abused for crypto scams, Android malware delivery Over 116,000 Minecraft systems infected in WeedHack malware campaign WordPress malware campaign hides payloads in Steam profiles ChatGPT share links abused to host fake outage pages to deliver … …