SC backdoor

WordPress Backdoor SC Self-Heals Using Files, Database, and Shared Memory

Sucuri researchers have detailed a WordPress backdoor codenamed SC that employs multiple persistence mechanisms—including injected files, database entries, and shared memory segments—to ensure the malware self-replicates after apparent remediation. The threat actors embedded "SC_" markers in injected content to facilitate reconstruction of the malicious payload.