New Linux Malware Uses 30 Plugin Exploits to Backdoor WordPress Sites

Overview

Bleeping Computer and other sources reported that a previously unidentified Linux malware has been exploiting vulnerabilities in numerous outdated WordPress plugins and themes through the insertion of malicious JavaScript. This malware targets 32-bit and 64-bit Linux systems and grants the operator remote command abilities, according to a report by antivirus vendor Dr. Web. The trojan uses a set of hardcoded exploits that run continuously until one of them is successful. To defend against this threat, WordPress website admins should update to the latest available versions of the plugins and themes active on their site and replace those that are no longer developed/supported with reputable alternatives

Sources

https://linuxsecurity.com/news/hackscracks/new-linux-malware-uses-30-plugin-exploits-to-backdoor-wordpress-sites#:~:text=A%20previously%20unknown%20Linux%20malware,its%20operator%20remote%20command%20capabilities

https://www.bleepingcomputer.com/news/security/new-linux-malware-uses-30-plugin-exploits-to-backdoor-wordpress-sites/