An attacker managed to gain access to the marketing platform Brevo by exploiting a residual Cloudflare API key left in the source code. This was used to deploy a malicious Cloudflare Worker that installed harmful scripts and a backdoor plugin on tens of thousands of WordPress sites. Visitors to the affected websites were subsequently presented […]
The NCSC warns that vulnerable WordPress websites are currently being exploited by a botnet. Attackers are placing malicious code on compromised websites, causing visitors to be unknowingly used for cyberattacks on other systems. The attack operates through the visitors’ browsers: as soon as someone visits an infected website, their device is temporarily used to send […]