Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack

Quick Summary:

Malicious updates available from WordPress.org create attacker-controlled admin account.

The updates also add content designed to goose search results.“The injected malicious code is not very sophisticated or heavily obfuscated and contains comments throughout making it easy to follow,” the researchers wrote.“The earliest injection appears to date back to June 21st, 2024, and the threat actor was still actively making updates to plugins as recently as 5 hours ago.

When installed, the updates automatically create an attacker-controlled administrative account that provides full control over the compromised site.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Dan Goodin

Category: Technology

Markets: United StatesMali

Topics: Supply chain attacks Backdoors Wordpress Plugins Security

Source Website Secure: Yes (HTTPS)

News Sentiment: Neutral

Fact Checked: Legitimate

Article Type: News Report

Published On: 2024-06-24 @ 21:00:43 (1 weeks ago)

News Timezone: GMT -5:00

News Source URL: arstechnica.com

Language: English

Article Length: 161 words

Reading Time: 1 minutes read

Sentences: 36 lines

Sentence Length: 5 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Ars Technica

News ID: 21374886

View Article Analysis

About Ars Technica

Main Topics: Technology

Official Website: arstechnica.com

Update Frequency: 5 posts per day

Year Established: 1998

Headquarters: United States

News Last Updated: 10 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT -5:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #32

Publisher Details

Frequently Asked Questions