Currently #analyzing a multistage payload #Wordpress malware, that is being #emailed to siteowners at the moment as a fix for a #cve ... basically it ends upp creating #remoteshell with root privs and have some utils to dump out #mysql, #postgre and #mssql #databases among other things.
I'm amazed that they have not obfuscated this harder. The main script that is the wordpress plugin have some mangled function names, the payloads are just base64 and zlib and those files is not mangeeled.
…According to #Prism, You requested the #Festival #Director #LawrenceMinhBùiDavis, to submit a #report his request specifically mentioned the #Trans and #Nonbinary #ReadingRoom, described as possibly one of the festival’s most “#sensitive” #occurrences because of the growing number of #bookbans directed at #transgender and #nonbinary #writers, according to the #WashingtonPost.
Within hours of Davis’s #report responding to the request being submitted, You #emailed out #news of the #cancellation
Independent Culture Newsletter The best in film, music TV & radio straight to your inbox every week Please enter your email address Please enter a valid email address Please enter a valid email address SIGN UP Thanks for signing up to the Independent Culture newsletter {{#verifyErrors}} {{message}} {{/verifyErrors}} {{^verifyErrors}} {{message}} {{/verifyErrors}} I would like to be emailed about offers, events and updates from The Independent. Read our privacy notice Independent Culture Newsletter The best in film, music TV & radio straight to your inbox every week Thanks for signing up to the Independent Culture newsletter {{#verifyErrors}} {{message}} {{/verifyErrors}} {{^verifyErrors}} {{message}} {{/verifyErrors}} I would like to be emailed about offers, events and updates from The Independent. “The @RecordingAcad needs to own up to this failure of selecting Bill Burr as a presenter,” another viewer wrote.
Jote 🏳️🌈 
Susan Larson ♀️🏳️🌈🏳️⚧️🌈
TheQuickFlash