New GoTrim Botnet Attempting to Break into WordPress Sites’ Admin Accounts

Dec 14, 2022Ravie LakshmananWebsite Security / Linux

A new Go-based botnet has been spotted scanning and brute-forcing self-hosted websites using the WordPress content management system (CMS) to seize control of targeted systems.

“This new brute forcer is part of a new campaign we have named GoTrim because it was written in Go and uses ‘:::trim:::’ to split data communicated to and from the C2 server,” Fortinet FortiGuard Labs researchers Eduardo Altares, Joie Salvio, and Roy Tay said.

The active campaign, observed since September 2022, utilizes a bot network to perform distributed…