Attackers began to inject hidden miners into plugins for WordPress

Recently, attackers often use fake plugins for the WordPress content management system for the purpose of hidden mining of cryptocurrencies. It is reported by AMB Crypto .

A cyber security report by Sucuri said hackers clone plugins for WordPress to create a backdoor on the victim’s website and subsequently mine the cryptocurrency. One of these fake plugins is wpframework, which was discontinued in 2011. However, at least 400 installations of this module have been identified in the past few months.

According to the researchers, the scheme with modified plugins for WordPress attracts attackers with its simplicity, since you do not need to create new software, but just add a few lines of code. In addition, hackers have already created tools that easily clone original WordPress plugins and embed malicious files into them.

Earlier today, BlockchainJournal reported that hackers began to embed hidden miners in WAV audio files.

Subscribe to the BlockchainJournal YouTube Channel!