WordPress Plugin Threats

25 Jan 2022

As if there isn’t enough news of crisis in the Cyberworld, such as nation-state threats and career criminals using malware automations, now your problem could be safely incubating inside your own fence. Specifically, a WordPress backdoor that leads to the front door of your business where all the keys hang. 

Introducing CVE-2021-24867. The trouble centers around themes and plug-ins downloaded via AccessPress Themes, a Nepal-based organization that has at least 360,000 active website installations. 

“The infected extensions contained a dropper for a web shell that gives the attackers full access to the infected sites,” said security researcher firm JetPack. They elaborate even further: “The same extensions were fine if downloaded or installed directly from the WordPress[.]org directory.” 

That’s the best news about all of this, and the worst news is that they found spammy activity linked to this as far back as three years. So, removing the extensions won’t cut it, necessitating an inspection of the website for the possibility of deep-set risks. 

At Petronella Technology Group, we keep our eyes on the bad news so that we can help convert it to good news. If you suspect you may be affected by this, we can help reverse the damage and not only close the backdoor but fortify the whole casa

An incident like this, however, may actually be a blessing in disguise! There is no time like the present to have a serious talk about throwing manual Cybersecurity efforts to the wind where they seem to be falling face-first onto the pavement anyway.  

AI-driven, intuitive, proactive tools are the best pathway forward. Machine Learning Algorithms can peer deeper into the telemetry of your network than you ever could, and in fact, we’ll pause the writing of this blog right now to stop and ponder just how it is even possible that computers process so much data so quickly. It’s absolutely mind-blowing! 

If you are ready to take the steps you need to protect yourself and your business in this new cyber era, you have come to the right place. Please give us a call at 919-422-2607 or schedule a free online meeting here

Schedule an Appointment

Schedule an Appointment

    Our clients are awesome!

    Based on 55 reviews.
    Jeremy Richards
    Jeremy Richards
    2020-03-13
    Petronella provides great advanced digital marketing and automation solutions for my business!
    Kate Swenson
    Kate Swenson
    2020-02-14
    Highly recommended for CMMC certification assistance! Excellent and affordable options for secure data hosting on local infrastructure. 5 stars!
    Tom Matzen
    Tom Matzen
    2020-01-25
    Petronella Technology Group helped us setup our sales and marketing automation, cybersecurity and compliance for our new Blockchain startup. Great to work with! Craig in particular really knows his stuff, can translate into non-tech speak, and has wisdom beyond his years. Highly recommend them.
    Justin Summers
    Justin Summers
    2020-01-14
    Craig is awesome! He is very professional and efficient with his work. I would definitely recommend Petronella Technology to anyone who needs state of the art service.
    Blake Rea
    Blake Rea
    2020-01-14
    Craig is an expert in his field. Impressed by his knowledge, A true pioneer in Cybersecurity. My business is safer thanks to Petronella Tech!
    Robert Friedman
    Robert Friedman
    2020-01-10
    For the last five years Craig has been the Contributing Editor for Cybersecurity for NC Triangle Attorney Law Magazine which I publish. His base of knowledge is always leading edge, pragmatic and early to understand for our readers who are not techies. He is patient and easy to work with.
    Tammy Everett
    Tammy Everett
    2020-01-10
    Craig Petronella, CEO of Petronella Technology Group provided the members of the Defense Alliance of North Carolina expert advice on cybersecurity and NIST compliance. Eye opening experience! Thanks so much!
    Julie Brown
    Julie Brown
    2020-01-09
    Craig and the Petronella Technology Group, Inc. team made HIPAA compliance for my small practice so simple and easy! They helped me with all of my HIPAA training, HIPAA Security Risk Assessment, Penetration Test, and HIPAA secure hosting so I can rest easy.
    Pivot Point
    Pivot Point
    2020-01-03
    Petronella Technology Group helped us with our marketing strategy for our new web startup. Awesome experience!!!!
    Richard Brunet
    Richard Brunet
    2019-12-30

    SCHEDULE AN APPOINTMENT

    Make It Happen Now

    CLIENT SUPPORT

    Don't Feel Stranded

    CONSULTATION

    Get Best Advice

    PAYMENTS

    Make A Payment

    Top