A hacker group accidentally left one of its servers exposed to the internet without password protection. Cybersecurity researchers discovered the server and found hacking tools, target lists, and activity logs that showed how the attackers attacked websites.
The server contained information on more than 1.4 million websites , which were scanned for vulnerabilities. Fortunately, this doesn’t mean all of these sites were hacked, but it does indicate the scale of the entire operation.
How the attack took place
The attackers didn’t exploit new or unknown vulnerabilities. Instead, they looked for sites with outdated WordPress plugins for which security patches had already been released by the developers but hadn’t been installed by the site owners.
The most frequently attacked plugins were Breeze Cache and ThemeREX Addons . Thousands of websites that failed to update in a timely manner were compromised through these plugins.
Researchers estimate that more than 25,000 websites were successfully hacked during this campaign.
How to secure a WordPress website
The best way to protect your website is to regularly update WordPress, plugins, and themes. If you use Breeze Cache , ThemeREX Addons , Simple File List , or WP File Manager , make sure you have the latest versions installed.
It’s also recommended to remove unused plugins, regularly scan your website for malware, and create backups. You can check for known vulnerabilities in your plugins using the WPScan Vulnerability Database.
Conclusion
This case once again confirms that most attacks on WordPress are made possible not by new hacking methods, but because website owners fail to install updates in a timely manner.
Regular updates and periodic website security checks are the simplest and most effective ways to protect your business.
Need help with website security?
If you’re unsure how secure your WordPress site is, Dits.md specialists are ready to help. We conduct WordPress security audits, scan websites for malware, analyze plugins, and provide practical recommendations to help protect your website from cyberattacks.
