Vulnerability Bulletins

Malicious Plugin Used to Encrypt WordPress Posts

   
Affected software Wordpress
 
http://feedproxy.google.com/~r/sucuri/blog/~3/KfFfwCGn5Tg/malicious-plugin-used-to-encrypt-wordpress-posts.html During a recent cleanup, we found an interesting malicious WordPress plugin, “WP Security”, that was being used to encrypt blog post content. The website owner complained of a newly installed and activated plugin on their website that was rendering their original content unreadable. The plugin encrypted posts with the ‘AES-256-CBC’ method by using the […]

More info:

http://feedproxy.google.com/~r/sucuri/blog/~3/KfFfwCGn5Tg/malicious-plugin-used-to-encrypt-wordpress-posts.html