WPGateway WordPress plugin vulnerability could allow full site takeover

Categories: News

Tags: WPGateway

Tags: WordPress

Tags: plugin

Tags: vulnerability

Tags: CVE

We take a look at a vulnerability being exploited in the wild related to the WPGateway WordPress plugin.

(Read more…)

The post WPGateway WordPress plugin vulnerability could allow full site takeover appeared first on Malwarebytes Labs.

Read more

BackupBuddy WordPress plugin vulnerable to exploitation, update now!

Categories: News

Tags: BackupBuddy

Tags: WordPress

Tags: vulnerability

Tags: exploit

Tags: hack

Tags: compromise

Tags: update

We take a look at a vulnerability in popular WordPress plugin BackupBuddy, and the steps you need to take to fix it.

(Read more…)

The post BackupBuddy WordPress plugin vulnerable to exploitation, update now! appeared first on Malwarebytes Labs.

Read more

Warning for WordPress admins: uninstall the Modern WPBakery plugin immediately!

Credit to Author: Christopher Boyd| Date: Tue, 19 Jul 2022 12:07:10 +0000

We take a look at a WordPress plugin, abandoned and open to JavaScript related exploitation. Uninstall it now!

The post Warning for WordPress admins: uninstall the Modern WPBakery plugin immediately! appeared first on Malwarebytes Labs.

Read more

Sysrv botnet is out to mine Monero on your Windows and Linux servers

Credit to Author: Pieter Arntz| Date: Wed, 18 May 2022 12:55:00 +0000

The Sysrv botnet has been developing over the last years, and has become a multi-platform botnet that specializes in Monero cryptomining.

The post Sysrv botnet is out to mine Monero on your Windows and Linux servers appeared first on Malwarebytes Labs.

Read more

Fake reCAPTCHA forms dupe users via compromised WordPress sites

Credit to Author: Pieter Arntz| Date: Mon, 16 May 2022 11:54:12 +0000

Threat actors have launched a new campaign that starts with compromised WordPress sites and leads to fake reCAPTCHA sites designed to get visitors to accept web push notifications.

The post Fake reCAPTCHA forms dupe users via compromised WordPress sites appeared first on Malwarebytes Labs.

Read more

Ukraine government and pro-Ukrainian sites hit by DDoS attacks

Credit to Author: Malwarebytes Labs| Date: Fri, 29 Apr 2022 08:01:46 +0000

We can’t tell which party made the first move, but both the pro-Ukraine and Russian sides have been exchanging DDoS attacks.

The post Ukraine government and pro-Ukrainian sites hit by DDoS attacks appeared first on Malwarebytes Labs.

Read more