A dangerous new WordPress malware strain, dubbed SC, leverages Ethereum’s decentralized infrastructure to operate its command-and-control channels without interruption, cybersecurity firm Sucuri warned. The malicious software maintains redundant copies stored across at least eight system locations simultaneously, enabling it to self-heal and rebuild the infection if administrators attempt a partial server cleanup.
‼️ A WordPress backdoor can rebuild itself after cleanup.
SC keeps redundant copies across files, the database, and, where supported, System V shared memory. Any surviving copy can restore the malware, while Ethereum is used for command-and-control.
Inside the reinfection loop:… pic.twitter.com/hIVKfi5pnG
— The Hacker News (@TheHackersNews) October 1, 2026
Unlike conventional cyberattacks whose centralized command servers can be seized or blocked, this threat integrates a list of roughly 20 public Ethereum RPC gateways. By tapping into the inherent resilience of blockchain infrastructure, the attackers ensure uninterrupted delivery of malicious commands, facilitating the theft of administrative session tokens, the disabling of security defenses, and the injection of JavaScript code to exfiltrate payment credentials from digital storefronts.
This attack vector highlights the growing sophistication with which threat actors repurpose Web3 architecture against legacy web platforms. In light of this threat, security experts recommend comprehensive database-level audits, complete replacement of compromised core files, and strict monitoring of outbound calls to blockchain nodes.
Source: https://x.com/TheHackersNews/status/2105668670332751920
Disclaimer: Crypto Economy Flash News updates are sourced from verified official and public communications reviewed by our editorial team. Their primary purpose is to provide timely reporting on pivotal developments across the crypto and blockchain ecosystems. This content does not constitute financial advice or investment recommendations. We recommend verifying official project channels prior to taking actionable steps.
