Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one of those copies should be treated as compromised, and the…

Malware novo costuma reaproveitar técnicas antigas. Os indicadores (hashes, domínios, comportamento) servem de pista para caçar no seu ambiente.

• Anote os indicadores de comprometimento citados.
• Pergunte: o EDR detectaria esse comportamento?
• Mapeie as técnicas no MITRE ATT&CK.