In the security news, FBI seizes one of the biggest stolen credential markets, Is catching ransomware the baseline for detection and response? Potential outcomes of the US National Cybersecurity Strategy, Thieves are using headlights to steal cars, China wants to censor generative AI, Tesla sued for snooping on owners through built-in cameras, All ...
The cybersecurity firm said the actor behind the attack, which they track as UNC4736, has a "nexus" to North Korea, thought they stopped short of attributing it to state actors.
The campaign exploits "all known and recently discovered theme and plugin vulnerabilities" to inject a Linux backdoor that can obtain critical information on the compromised websites.