from the never-good-news-from-Wordpress dept.
Submitted via IRC for SoyCow1984
Researchers find fake WordPress plugins that secretly mine cryptocurrency
Researchers have discovered several malicious WordPress plugins that are being used to surreptitiously mine cryptocurrency by running Linux binary code.
According to the researchers at website security company Sucuri, the plugins are also being used to maintain access to compromised servers. It seems their use has increased in recent months.
Essentially, the components are clones of the legitimate software, which have been altered for illicit purposes, making them relatively easy for hackers to create. Although the plugins' code differs in terms of names, they do have several things in common: they have a similar structure and header comments from the popular backup/restore plugin UpdraftPlus.
(Score: 2) by NateMich on Sunday October 20 2019, @11:47AM (1 child)
Malicious or hacked wordpress plugins has only been a problem for several years now.
Same with crypto mining on hacked site.
(Score: 2) by takyon on Sunday October 20 2019, @12:54PM
Real WordPresses, Real money! Click here.
[SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]