Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million active installations. The vendor also offers UpdraftCentral, a remote…

Malware novo costuma reaproveitar técnicas antigas. Os indicadores (hashes, domínios, comportamento) servem de pista para caçar no seu ambiente.

• Anote os indicadores de comprometimento citados.
• Pergunte: o EDR detectaria esse comportamento?
• Mapeie as técnicas no MITRE ATT&CK.