{"id":16974,"date":"2026-08-04T16:36:08","date_gmt":"2026-08-04T14:36:08","guid":{"rendered":"https:\/\/dits.md\/?p=16974"},"modified":"2026-08-04T16:48:24","modified_gmt":"2026-08-04T14:48:24","slug":"un-server-expus-al-hackerilor-dezvaluie-un-atac-masiv-asupra-site-urilor-wordpress","status":"publish","type":"post","link":"https:\/\/dits.md\/ro\/un-server-expus-al-hackerilor-dezvaluie-un-atac-masiv-asupra-site-urilor-wordpress\/","title":{"rendered":"Un server expus al hackerilor dezv\u0103luie un atac masiv asupra site-urilor WordPress"},"content":{"rendered":"<p>[et_pb_section fb_built=&#187;1&#8243; admin_label=&#187;\u0420\u0430\u0437\u0434\u0435\u043b&#187; _builder_version=&#187;4.24.2&#8243; background_image=&#187;https:\/\/dits.md\/wp-content\/uploads\/fon-1.png&#187; background_enable_pattern_style=&#187;on&#187; background_pattern_style=&#187;tufted&#187; min_height=&#187;126px&#187; custom_padding=&#187;35px|0px|40px|0px|false|false&#187; global_module=&#187;2594&#8243; locked=&#187;off&#187; collapsed=&#187;off&#187; global_colors_info=&#187;{}&#187;][et_pb_row admin_label=&#187;\u0421\u0442\u0440\u043e\u043a\u0430&#187; _builder_version=&#187;4.27.0&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;][et_pb_column type=&#187;4_4&#8243; _builder_version=&#187;4.27.0&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#187;4.27.0&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;][et_pb_column type=&#187;4_4&#8243; _builder_version=&#187;4.27.0&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;][et_pb_post_title author=&#187;off&#187; date=&#187;off&#187; comments=&#187;off&#187; featured_image=&#187;off&#187; text_color=&#187;light&#187; _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; title_text_align=&#187;center&#187; title_text_color=&#187;#FFFFFF&#187; title_font_size=&#187;39px&#187; text_orientation=&#187;center&#187; custom_margin=&#187;||9px|||&#187; title_font_size_tablet=&#187;&#187; title_font_size_phone=&#187;30px&#187; title_font_size_last_edited=&#187;on|phone&#187; global_colors_info=&#187;{}&#187;][\/et_pb_post_title][et_pb_text _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;]<\/p>\n<p style=\"text-align: center;\"><span style=\"color: #ffffff;\">Author &#8212; <a style=\"color: #ffffff;\" href=\"\/ro\/constantin-nacul\/\">Constantin Nacul<\/a><\/span><\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#187;1&#8243; _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;][et_pb_row _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;][et_pb_column type=&#187;4_4&#8243; _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;][et_pb_text _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;]<\/p>\n<p>Un grup de infractori cibernetici a l\u0103sat din gre\u0219eal\u0103 unul dintre serverele sale accesibil pe internet, f\u0103r\u0103 nicio protec\u021bie prin parol\u0103. Cercet\u0103torii \u00een securitate cibernetic\u0103 au descoperit serverul \u0219i au g\u0103sit instrumente de atac, liste cu \u021binte \u0219i jurnale de activitate care au ar\u0103tat modul \u00een care erau compromise site-urile.<\/p>\n<p>Serverul con\u021binea informa\u021bii despre peste <strong>1,4 milioane de site-uri web<\/strong>, care fuseser\u0103 scanate pentru vulnerabilit\u0103\u021bi. Din fericire, acest lucru nu \u00eenseamn\u0103 c\u0103 toate aceste site-uri au fost compromise, \u00eens\u0103 demonstreaz\u0103 amploarea opera\u021biunii.<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;]<\/p>\n<h2><strong>Cum a func\u021bionat atacul<\/strong><\/h2>\n<p>Atacatorii nu au folosit vulnerabilit\u0103\u021bi noi sau necunoscute. Ei au c\u0103utat site-uri WordPress care foloseau pluginuri \u00eenvechite, pentru care existau deja actualiz\u0103ri de securitate, dar acestea nu fuseser\u0103 instalate.<\/p>\n<p>Cele mai vizate pluginuri au fost <strong>Breeze Cache<\/strong> \u0219i <strong>ThemeREX Addons<\/strong>, prin intermediul c\u0103rora au fost compromise mii de site-uri neactualizate.<\/p>\n<p>Cercet\u0103torii estimeaz\u0103 c\u0103 peste <strong>25 000 <\/strong>de site-uri au fost compromise \u00een timpul acestei campanii.<\/p>\n<p>[\/et_pb_text][et_pb_text admin_label=&#187;\u0422\u0435\u043a\u0441\u0442&#187; _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;]<\/p>\n<h2><strong>Cum \u00ee\u021bi protejezi site-ul WordPress<\/strong><\/h2>\n<p>Cea mai bun\u0103 metod\u0103 de protec\u021bie este s\u0103 men\u021bii WordPress, pluginurile \u0219i temele mereu actualizate. Dac\u0103 folose\u0219ti <strong>Breeze Cache<\/strong>, <strong>ThemeREX Addons<\/strong>, <strong>Simple File List<\/strong> sau <strong>WP File Manager<\/strong>, verific\u0103 dac\u0103 ai instalat\u0103 cea mai recent\u0103 versiune.<\/p>\n<p>De asemenea, este recomandat s\u0103 elimini pluginurile pe care nu le mai folose\u0219ti, s\u0103 verifici periodic site-ul pentru malware \u0219i s\u0103 p\u0103strezi copii de siguran\u021b\u0103. Po\u021bi verifica dac\u0103 pluginurile tale au vulnerabilit\u0103\u021bi cunoscute folosind <strong>WPScan Vulnerability Database<\/strong>.<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;]<\/p>\n<h2><strong>Concluzie<\/strong><\/h2>\n<p>Acest incident demonstreaz\u0103 \u00eenc\u0103 o dat\u0103 c\u0103 majoritatea atacurilor asupra site-urilor WordPress au succes deoarece actualiz\u0103rile de securitate nu sunt instalate la timp, nu pentru c\u0103 hackerii descoper\u0103 vulnerabilit\u0103\u021bi noi.<\/p>\n<p>Actualizarea regulat\u0103 a site-ului \u0219i verific\u0103rile periodice de securitate sunt cele mai simple \u0219i eficiente metode de a-\u021bi proteja afacerea.<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; global_colors_info=&#187;{}&#187;]<\/p>\n<h2><strong>Ai nevoie de ajutor pentru securizarea site-ului?<\/strong><\/h2>\n<p>Dac\u0103 nu e\u0219ti sigur c\u0103 site-ul t\u0103u WordPress este suficient de protejat, echipa <strong>DITS.agency<\/strong>\u00a0te poate ajuta. Oferim audituri de securitate WordPress, verific\u0103ri pentru malware, analiz\u0103 de pluginuri \u0219i recomand\u0103ri practice pentru a-\u021bi proteja site-ul \u00eempotriva atacurilor cibernetice.<\/p>\n<p>[\/et_pb_text][et_pb_button button_text=&#187;\u041e\u0444\u043e\u0440\u043c\u0438\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443&#187; button_alignment=&#187;center&#187; module_class=&#187;open-call-me&#187; _builder_version=&#187;4.27.5&#8243; _module_preset=&#187;default&#187; custom_button=&#187;on&#187; button_text_color=&#187;#3F1C6C&#187; button_bg_color=&#187;RGBA(255,255,255,0)&#187; button_border_color=&#187;#3F1C6C&#187; button_icon_color=&#187;#3F1C6C&#187; custom_margin=&#187;20px||||false|false&#187; custom_margin_tablet=&#187;20px||||false|false&#187; custom_margin_phone=&#187;20px||||false|false&#187; custom_margin_last_edited=&#187;on|desktop&#187; global_colors_info=&#187;{}&#187;][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>","protected":false},"excerpt":{"rendered":"<p>Un grup de infractori cibernetici a l\u0103sat din gre\u0219eal\u0103 unul dintre serverele sale accesibil pe internet, f\u0103r\u0103 nicio protec\u021bie prin parol\u0103. Cercet\u0103torii \u00een securitate cibernetic\u0103 au descoperit serverul \u0219i au g\u0103sit instrumente de atac, liste cu \u021binte \u0219i jurnale de activitate care au ar\u0103tat modul \u00een care erau compromise site-urile.<\/p>","protected":false},"author":4,"featured_media":16986,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[31],"tags":[],"class_list":["post-16974","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/posts\/16974","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/comments?post=16974"}],"version-history":[{"count":13,"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/posts\/16974\/revisions"}],"predecessor-version":[{"id":16997,"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/posts\/16974\/revisions\/16997"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/media\/16986"}],"wp:attachment":[{"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/media?parent=16974"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/categories?post=16974"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dits.md\/ro\/wp-json\/wp\/v2\/tags?post=16974"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}