Malware exploiting XML-RPC vulnerability in WordPress

**Win32.Backdoor.WPbrutebot**: Zscaler ThreatLabZ describes a malware campaign that enumerates and brute-forces WordPress sites via the XML-RPC wp.getUsersBlogs method, uses XOR-obfuscated strings and blockchain DNS to reach C2 servers, downloads updated backdoor payloads, and performs actions including credential access and process manipulation; the report includes analysis artifacts, MITRE TTP mappings, and IOCs (file hashes and IPs).