highCyber Attacks
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Compromised connection keys used to inject malicious code into WordPress installations via UpdraftCentral, UpdraftVault, and UpdraftClone
Cyber.TechVoid1 min read
Key Takeaways
- Unknown threat actors breached TeamUpdraft's website and gained access to UpdraftCentral, UpdraftVault, and UpdraftClone connection keys.
- Stolen connection keys were used to plant backdoors on WordPress sites.
- UpdraftPlus, with over four million active installations, is among the potentially affected products.
Related Security News
highCyber Attacks
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group attributed to Partisan Zmiy (also known as Cyber Partisans) conducted a cyber espionage campaign against a Russian healthcare organization. According to a report by Russian cybersecurity firm Solar, the group hid the Vasilek backdoor in compromised VMware Tools installers, enabling nearly two years of unauthorized access beginning around October 2024 and discovered in October 2026. The attackers leveraged signed, seemingly legitimate software updates to maintain persistence and exfiltrate data.
The Hacker News1 min read
