Stolen UpdraftCentral Keys Are Backdooring WordPress Sites — and Updating the Plugin Is Not Enough
In brief TeamUpdraft disclosed on October 19 that attackers accessed its website over the weekend of October 17–18 and got into its customer database — which contained the connection keys for UpdraftCentral, UpdraftVault and UpdraftClone, plus customer account information. The attackers used the stolen keys to send properly signed remote-management commands that installed backdoor plugins … Read more