From RuntimeWire · RuntimeWire · · 30s
TeamUpdraft keys stolen, WordPress backdoors installed
Stolen TeamUpdraft keys let attackers install WordPress backdoors on 400,000 sites.
In brief
Stolen TeamUpdraft keys let attackers install WordPress backdoors on 400,000 sites. TeamUpdraft's stolen UpdraftCentral keys enabled attackers to install backdoors on connected WordPress sites. Originally reported by RuntimeWire.
TeamUpdraft keys compromised
TeamUpdraft identified unauthorized access to its website over the weekend of October 17th-18th.
400,000 sites at risk
The incident put credentials for UpdraftCentral, UpdraftVault and UpdraftClone at risk for 400,000 sites.
Attackers installed backdoors
Attackers used stolen keys to install backdoors on connected WordPress sites.
The main idea
TeamUpdraft's stolen UpdraftCentral keys enabled attackers to install backdoors on connected WordPress sites.
