Now you get up to 5% of your purchase back when you shop with Alibaba. This made possible through a recent partnership agreement between the online retailer giant, Alibaba and Lolli Bitcoin shopping rewards app.

“I’m excited to partner with Alibaba on Singles Day and offer the opportunity to earn bitcoin back to its shoppers. This is a milestone partnership for Lolli as Alibaba is the largest retailer and e-commerce company in the world, launching on Single’s Day, the world’s largest shopping day of the year. Our partnership allows our users to earn free bitcoin on millions of products online every day. Arguably the most important piece of this partnership is that it supports our mission of connecting the entire world through commerce.”

CEO and Co-founder of Lolli, Alex Adelman, said

Lolli is the first bitcoin rewards application that lets people earn & own bitcoin when they shop online. Lolli has partnered with 500+ top brands to help drive sales and conversions on their sites. Lolli’s users can earn Bitcoin by using Lolli after activating and making a qualified purchase on one of Lolli’s merchant partner sites.

The Chinese e-commerce giant Alibaba made yesterday 91.2 billion yuan ($13 billion) in sales during the Singles’ Day event. According to Statista, the annual revenue of Alibaba in 2018 was 250 billion yuan and its estimated be reach 376 billion yuan in 2019.

A trojanized version of the Tor Browser is currently targeting Russian users to steal their Bitcoin funds. This was discovered by ESET security researchers.

When victims try make any Bitcoin transactions, the Backdoored Tor browser will automatically replace the original destination address with another address controlled by criminals.

The attackers are promoting their trojanized version of the Tor Browser through posting spam message on some popular Russian cryptocurrency websites to encourage victims to download and use the infected browser. Two domain names are used to distrubute the infected browser tor-browser[.]org and torproect[.]org

At the moment of publishing, the cryptocurrency wallets controlled by the attackers received 863 transactions worth of $40,000 in Bitcoin cryptocurrency.

Security researchers at Sucuri have discovered a number of fake and malicious WordPress plugins that are being used not just to maintain access on the compromised websites but also to mine cryptocurrencies.

WPframework is a commonly used WordPress malicious plugin that hides itself to be a legitimate plugin, but its a PHP backdoor that will allow attackers to maintain their access even after the initial infection vector has been cleaned up.

The plugin will download Linux executable binary files to mine cryptocurrencies in the background.

What is WordPress?

WordPress is a widely used open source content management system (CMS) written in PHP with back-end MySQL database. WordPress is considered to be the easiest and most powerful blogging and website content management system in existence today. Right now, there are around 75,000,000 websites are using WordPress.