Skip to content

Malware

DollyWay

PHP/JavaScript malware for WordPress that injects multi-stage scripts, turning compromised sites into distributed TDS/C2 nodes.

DollyWay is a PHP malware family.

Background

A PHP/JavaScript WordPress threat that injects multi-stage scripts to convert hijacked sites into distributed TDS/C2 nodes. It serves signed payloads, persists through helper files, and funnels visitor traffic toward monetized scam networks.


Source: Malpedia (Fraunhofer FKIE).