Over 47,000 Malicious Plugins Discovered on WordPress Sites; Thousands of Elasticsearch Databases Targeted by Ransomware

In today's cybersecurity news, we highlight the threat of malicious plugins to WordPress websites. A recent report from a cybersecurity research team revealed that over 47,000 malicious plugins were discovered during an eight-year study. These malicious plugins were deployed across 24,000 websites, and many remain highly active today.

The threat of malicious plugins to WordPress websites cannot be underestimated. These plugins are often designed to steal sensitive user information, including personal data, login credentials, and passwords. Hackers use these malicious plugins to breach WordPress sites, causing severe losses to users.

A recent incident further underscores these cybersecurity risks. Researchers discovered that hackers targeted 1,200 Elasticsearch databases, deleting data and leaving ransom notes. This event highlights the critical importance of database security and the threats databases face once compromised.

Following long-term analysis, researchers found that in 2022, malicious WordPress plugins were widespread across 410,122 website servers. They identified 24,931 websites containing malicious plugins, with a total of 47,337 problematic components deployed. Even more concerning is that 3,685 of these problematic plugins were still being sold legitimately on established marketplaces.

Recently, cybersecurity firm Secureworks pointed out that hackers have begun targeting Elasticsearch databases with relatively insecure configurations. They wiped the contents of over 1,200 Elasticsearch databases and left ransom notes inside. These hackers demanded that database owners pay 0.012 Bitcoin (approximately $620 USD) within one week to recover their data. If the ransom is not paid within the deadline, the amount doubles.

This entire situation demonstrates the vital importance of website security protection. As a widely used Content Management System (CMS), WordPress attracts significant attention from hackers. Many websites use insecure plugins, making them vulnerable to attack. To protect their websites, owners should regularly update and monitor their plugins while ensuring their database configurations are set to a more secure state.

In addition to attacks on WordPress sites and databases, a vulnerability related to the Windows Support Diagnostic Tool (MSDT) was recently disclosed. Identified as CVE-2022-30190, it pertains to the Windows search protocol "search-ms." This vulnerability allows attackers to abuse the Windows search protocol to exploit system weaknesses and further attack the system. The disclosure of this vulnerability serves as a reminder that protecting individual and corporate data security is a continuous battle; we must remain vigilant and patch vulnerabilities promptly.

In today's digital age, cybersecurity issues are increasingly important, especially when establishing your online presence. Although WordPress is a convenient and user-friendly platform ideal for beginners, security still requires close attention. This is exactly why we strongly recommend choosing Easy-StoreWP to be your best partner.

At Easy-StoreWP, we have professional cybersecurity experts who will assist you in building your website in a stress-free environment while ensuring the security of your online data and information. We understand every detail of website operations and take preventive measures against various potential risks.

Our goal is to provide you with a worry-free website-building experience. Whether you are an individual blogger, a small business owner, or a website operator for a large enterprise, we can tailor solutions to meet your specific needs, helping you build a secure website that is uniquely yours.