One such incident happened lately when the renowned developer BestWebSoft sold a pop Captcha WordPress plugin to an undisclosed buyer, who therefore modified the plugin to download as well as install a hidden backdoor.
In a acquire pop plugins as well as applications to stealthy infect their large user base of operations amongst malware, adware, as well as spyware.
While figuring out the actual identity of the Captcha plugin buyer, WordFence researchers constitute that the simplywordpress[dot]net domain serving the backdoor file was registered to soul named "Stacy Wellington" using the electronic mail address "scwellington[at]hotmail.co.uk."
Using opposite whois lookup, the researchers constitute a large issue of other domains registered to the same user, including Convert me Popup, Death To Comments, Human Captcha, Smart Recaptcha, as well as Social Exchange.
What's interesting? All of the above-mentioned domains booked nether the user contained the same backdoor code that the WordFence researchers constitute inward Captcha.
WordFence has teamed upward amongst WordPress to spell the affected version of Captcha plug-in as well as blocked the writer from publishing updates, therefore websites administrators are highly recommended to supercede their plugin amongst the latest official Captcha version 4.4.5.
WordFence has promised to liberate in-depth technical details on how the backdoor installation as well as execution works, along amongst a proof-of-concept exploit subsequently xxx days therefore that admins larn plenty fourth dimension to spell their websites.
