Trusted WordPress Plugins Turned Into Malware Delivery Tools

by Ophtek, LLC | May 26, 2026 | Hackers, malicious code, malicious sites, malware, Plugins, WordPress

  Trusted WordPress Plugins Turned Into Malware Delivery Tools. A hacked WordPress plugin suite has pushed malware to thousands of websites, highlighting how trusted tools can quickly be turned into threats. When you run a website, you tend to assume that popular...

How 4.3M Users Got Hacked By Browser Extensions

by Ophtek, LLC | Jan 20, 2026 | browser extensions, check permissions, Hackers, malicious code, official sources, review, ShadyPanda, spyware

  Over the last seven years, a malware campaign has turned browser extensions people trusted into powerful spyware, with up to 4.3 million users affected. Most of us install extensions in good faith that they’re going to help us. Perhaps they’re a simple...

Vulnerable ASP.NET Keys Used to Unlock PC Security

by Ophtek, LLC | Mar 4, 2025 | ASP.NET keys, malicious code, malicious ViewState, Microsoft, monitor applications, Ophtek, System Updates

  Attackers are exploiting exposed ASP.NET keys to inject malicious code into web applications, leading to unauthorized access and potential data breaches. Microsoft has announced that a major security issue has been identified where cybercriminals are taking...

Threat Actors Start Hiding Malware within Website Images

by Ophtek, LLC | Feb 11, 2025 | archive.org, generative AI, malicious code, Obj3tivityStealer, Ophtek, Phishing, VIP Keylogger, website images

  Cybercriminals are increasingly embedding malware within website images to evade detection and compromise IT systems. Recent investigations have revealed a growing trend among threat actors: hiding malicious code within image files hosted on trusted websites....

Financial Firms Targeted by JsOutProx Malware

by Ophtek, LLC | May 7, 2024 | JavaScript Malware, JsOutProx Malware, malicious code, Ophtek, Phishing Email, ScriptSafe for Chrome

  Financial Firms Targeted by JsOutProx Malware. Financial Firms Targeted by JsOutProx Malware. A new phishing campaign, launched in March 2024, has been targeting financial firms all over the world with the JsOutProx banking trojan. The JsOutProx malware...

The Dangers of Malware on GitHub

by Ophtek, LLC | Mar 5, 2024 | GitHub, malicious code, malware, Open Source Malware, Ophtek

  The Dangers of Malware on GitHub. GitHub is a wildly popular website for developers to create, share, and store their code, but it’s also being increasingly used to spread malware. Launched in 2008, GitHub quickly became the number one destination for...