As if there isn’t enough news of crisis in the Cyberworld, such as nation-state threats and career criminals using malware automations, now your problem could be safely incubating inside your own fence. Specifically, a WordPress backdoor that leads to the front door of your business where all the keys hang.
Introducing CVE-2021-24867. The trouble centers around themes and plug-ins downloaded via AccessPress Themes, a Nepal-based organization that has at least 360,000 active website installations.
“The infected extensions contained a dropper for a web shell that gives the attackers full access to the infected sites,” said security researcher firm JetPack. They elaborate even further: “The same extensions were fine if downloaded or installed directly from the WordPress[.]org directory.”
That’s the best news about all of this, and the worst news is that they found spammy activity linked to this as far back as three years. So, removing the extensions won’t cut it, necessitating an inspection of the website for the possibility of deep-set risks.
At Petronella Technology Group, we keep our eyes on the bad news so that we can help convert it to good news. If you suspect you may be affected by this, we can help reverse the damage and not only close the backdoor but fortify the whole casa.
An incident like this, however, may actually be a blessing in disguise! There is no time like the present to have a serious talk about throwing manual Cybersecurity efforts to the wind where they seem to be falling face-first onto the pavement anyway.
AI-driven, intuitive, proactive tools are the best pathway forward. Machine Learning Algorithms can peer deeper into the telemetry of your network than you ever could, and in fact, we’ll pause the writing of this blog right now to stop and ponder just how it is even possible that computers process so much data so quickly. It’s absolutely mind-blowing!
If you are ready to take the steps you need to protect yourself and your business in this new cyber era, you have come to the right place. Please give us a call at 919-422-2607 or schedule a free online meeting here.