Recently, more than 700 WordPress and Joomla websites were found to be infected with IonCube Malware. A total of more than 7000 files were infected. These websites were infected with legitimate IonCube encoded files. Key directories of a WordPress site, such as “wrgcduzk.php” and “diff98.php”, were infected by this malware.
In brief, IonCube is actually a PHP Encoder employed for encrypting and protecting files with PHP encoding, obfuscation, encryption and licensing capabilities. Hackers are known to use the IonCube Malware for creating a backdoor on vulnerable websites permitting them to steal data from the Victims.