w2.js: Malicious JavaScript Payload in BdThemes Supply Chain Attack

w2.js is a JavaScript payload used in the BdThemes supply chain attack. It contacts a C2 server, creates rogue admin accounts, installs a web shell plugin, and deploys persistence modules.