Researchers have discovered hackers exploiting WordPress's "mu-plugins" directory to hide malware that enables remote access and visitor redirections. These must-use plugins automatically execute without dashboard activation, making them less visible during security checks. Three malicious...
A sophisticated credit card skimming campaign targets WordPress e-commerce sites by injecting malicious JavaScript into database tables. The attack focuses on checkout pages, creating fake payment forms that capture and encrypt credit card data before transmitting it to malicious servers. ...
A sophisticated year-long campaign by threat actor MUT-1244 has compromised over 390,000 WordPress credentials through trojanized tools, targeting security professionals and cybercriminals alike. The operation, discovered by Datadog Security Labs, utilized malicious GitHub repositories, ph...
A sophisticated cyber attack campaign targeting security researchers and penetration testers has resulted in the theft of over 390,000 credentials through a fake WordPress publishing tool on GitHub. The operation, attributed to threat actor MUT-1244, used trojanized repositories and phishi...
Two critical security flaws have been identified in the CleanTalk Spam Protection, Anti-Spam, and FireWall WordPress plugin, impacting over 200,000 websites. The vulnerabilities (CVE-2024-10542 and CVE-2024-10781) received a critical severity rating of 9.8/10 on the CVSS scale....
