WordPress is the most widely used content management system worldwide, which makes it very juicy for cybercriminals. A recent campaign has affected more than 17.000 Websites, using vulnerabilities in various paid plug-ins.

Cybercriminals managed to compromise websites by injecting a backdoor. This backdoor redirected website visitors to fake support pages, Fraudulent lottery prizes and push notification scams.

So far, there have been 6 waves of this type of attack. Researchers of these vulnerabilities warn that this malware usually affects websites that use older versions of plug-ins.

Fountain: Digital Shield


Leave a Reply

Your email address will not be published. Required fields are marked *

More news
Vimeo sufre una brecha de datos
Read more »
Booking.com suffers a data exfiltration of bookings
Read more »
La franquicia de gimnasios Basic-Fit sufre una exfiltración de datos
Read more »
New wave of scams using AI-cloned voices
Read more »
Una brecha en la Comisión Europea salpica unas treinta instituciones
Read more »