A malware campaign targeted 5,000 WordPress sites, enabling unauthorized admin users to download dangerous plugins. WordPress users are advised to check site security and remove suspicious plugins and unauthorized admins. C/side, the company reporting the campaign, recommends blocking the domain wp3[.]xyz, implementing multifactor authentication and taking measures to protect against Cross-Site Request Forgery (CSRF) attacks. Users are also advised to verify plugin sources are reputable.
Only 1% of malicious emails that reach inboxes deliver malware
In 2024, 99% of email threats to corporations were found to be social engineering or phishing attacks, as per Fortra. Most pre-delivery email defenses struggle
