WordPress is the target once again of an attack. A fake plugin that is very close to a legitimate one may allow backdoor access.
The plugin is actually a forged version of a search engine optimization (SEO) one called WordPress SEO Tools. The fake one was found originally by the company SiteLock.
On initial notice, one could be easily fooled into thinking the fake one is real. It uses native WordPress functionality. However, it allows a backdoor to be opened that could give someone with nefarious intentions the ability to use it for his or her own purposes.
Unfortunately, for the time being anti-malware scanners don’t seem to be finding this plugin. Even so, WordPress admins are being advised to perform a malware scan, update the WordPress core and all themes and plugins to their latest versions.
SiteLock also recommends that “If you find a suspicious plugin in your /wp-content/plugins directory it is best to delete the entire folder and reinstall a clean version of the plugin either in the WordPress admin dashboard or by downloading it directly from [WordPress].”
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
