WordPress instances have been compromised by Turla to host ZIP archives containing STOCKSTAY components. Both STOCKSTAY and Kazuar have been observed using compromised WordPress sites during various stages of their operations.
WordPress instances have been compromised by Turla to host ZIP archives containing STOCKSTAY components. Both STOCKSTAY and Kazuar have been observed using compromised WordPress sites during various stages of their operations.