New Wpeeper Android malware hides behind hacked WordPress sites

An Android backdoor called 'Wpeeper' was discovered in third-party app stores in April 2024; it uses compromised WordPress sites as encrypted, signed relays to hide its true C2 servers, supports 13 commands for data theft, execution, and updates, and XLab estimates thousands of devices may have been infected before the campaign ceased on April 22, 2024.