Milk Dragon Uses WooCommerce and Malicious WordPress Plugin to Steal Payment Data

Milk Dragon (NaiLong) is a commercially sold phishing kit that deploys malicious WordPress plugins alongside WooCommerce to host fake online stores which capture credit card details and relay one-time passwords in real time via a Socket.IO WebSocket connection; Group-IB linked 258 phishing pages across 66 countries, observed impersonation of numerous consumer brands and multiple financial templates, and reported the kit is offered via Telegram subscriptions with a feature-rich operator panel and affiliate support.