October 12, 2023 at 10:55AM A WordPress backdoor that disguises itself as a legitimate plugin has been discovered by security firm Defiant. The backdoor can run as a plugin and perform various functions, including creating an admin account and serving malicious content based on specific filters. It can also be operated remotely by the threat … Read more
October 12, 2023 at 06:33AM Researchers have discovered a new type of malware that disguises itself as a WordPress plugin in order to gain control over compromised websites. The malware is capable of creating administrator accounts, remotely controlling the site, altering content, injecting spam links, and redirecting visitors to malicious sites. It is difficult to … Read more
October 11, 2023 at 05:31PM A new malware disguised as a caching plugin is targeting WordPress sites, allowing threat actors to gain control over the site. The malware functions as a backdoor, enabling the management of plugins, content replacement, and redirecting users to malicious locations. It disguises itself as a legitimate plugin to avoid detection. … Read more