TeamUpdraft's stolen UpdraftCentral keys let attackers install WordPress backdoors
TeamUpdraft says attackers accessed its website during October 17th-18th; Patchstack and Nethemba traced attacks to valid remote-management keys and identified no flaw in victims' site setups.
By Ryan Merket · Published
Primary source: BleepingComputer
Why it matters
A compromised remote-management key can turn a breach of a vendor's infrastructure into commands across customer sites. The roughly 400,000-site figure is potential exposure, not a confirmed victim count; operators need to revoke keys and inspect sites directly.
TeamUpdraft's stolen UpdraftCentral keys let attackers install backdoors on connected WordPress sites.
TeamUpdraft said it identified unauthorized access to its website over the weekend of October 17th-18th and believes the intruder reached its customer database. The incident put credentials for UpdraftCentral, UpdraftVault and UpdraftClone at risk. TeamUpdraft said it closed the access route, signed out accounts and replaced credentials it believed could have been affected.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.