SecurityBleepingComputerabout 1 hour ago
Stolen Keys Backdoor 400,000 WordPress Sites
3 min read
TeamUpdraft detected unauthorized access to its website over the weekend of 17-18 October, potentially compromising UpdraftCentral connection keys. The breach exposed customer data and allowed attackers to install at least 99 malicious backdoor plugins on an estimated 400,000 websites. Researchers found the attacks started on October 18 at 15:32 UTC, exploiting valid private dashboard keys rather than server weaknesses.
Level
Hype check
Tap to vote and see what everyone thinks.
