Skip to main content

Attackers Tried To Grab WordPress Configuration Files From Over a Million Sites

What is a WordPress website?

The WordPress website is any website that uses WordPress as its CMS (content management system). WordPress enables both the back of the website (the interface where the user logs in to make changes or add new content) and the frontend (the visible part of the website your visitors see on the web).

Wordpress Blogging Website - Free image on PixabayHere are a few examples of the types of websites you can build with WordPress:

    Blog - A blog is a special kind of website dedicated to sharing ideas, photos, reviews, tutorials, recipes and much more. Blogs usually feature newly published content.
    E-commerce Website - An e-commerce website allows you to sell goods or services online and collect payments through an online payment system. You can download and install the WordPress e-commerce plugin to extend the default functionality of WordPress to have an online store on your website.
 
1-    Business website - Many businesses will benefit from having an online presence in the form of their website. If your business needs a website for customers to learn about your company and what to offer, WordPress is a great option. Customers can contact you, request a discount, arrange an appointment and much more.
  
2-  Membership Website - The membership website allows you to place content behind paywall or account login. To access pages or posts, users must sign in or pay for content. WordPress can also manage affiliate websites with additional plugins.
  
3-  Portfolio website - Showcase your art, design skills and more with a portfolio website built into WordPress.
  
4-  Forum website - The forum website can be a useful place for users to ask questions or share advice. Believe it or not, most forum websites work on WordPress.
  
5-  Event Website - Hosting the event? WordPress makes it easy for you to share your event details and sell tickets.
  
6-  E-learning website - Students can take online courses, track their progress, download resources and much more from the e-learning website. With a special type of plugin called WordPress LMS plugin, you can offer online tutorials from the WordPress website.
  
7-  Wedding Website - Share the details of your big day with a wedding website built into WordPress. With a variety of WordPress wedding themes, you can find a website quickly and easily.


The new campaign is to exploit similar information addresses, targeting most of the attacks and targeted sites. The campaign also attacks approximately 1,000,000 new sites that were not included in previous XSS campaigns, ”said Wordfence analyst Ram Gall.


The purpose of this latest campaign was to download a WP-config-PHP file, which contains information, meeting details, verification keys and salt.


"A hacker with access to the current file can gain access to site information, wherever the website's content and users store it," Gall said above.

He did not say that plugins and themes were invaded by the attackers, but it does say that almost all of the threats became themes or plugins designed to allow file downloads by reading the contents of the requested file with an excessive thread and popping up as a downloadable attachment.

Comments

Post a Comment

Popular posts from this blog

LIVE Webinar on Zerologon Vulnerability Is Going To Take Place: Technical Analysis and Detection

  I'm sure most of you have now heard of a high-risk Windows server - called Zerologon - that would allow hackers to take over business networks completely. For those of you who don't know, in short, all supported versions of Windows Server applications are at risk of a serious patent infringement that resides in the Netlogon Remote Control Protocol for Domain Controllers. In other words, the primary vulnerability (CVE-2020-1472) can be exploited by the attacker to stop Active Directory services, and ultimately, the Windows domain without the need for authentication. What’s worse is that the exploitation of evidence of this error was released to the public last week, and soon after that, the attackers began exploiting vulnerabilities through programs that were not included in the wild. As explained in our compilation based on technical analysis published by Cynet's security analysts, the main problem is Microsoft's implementation of AES-CFB8, where it failed to use the ...
Post a Comment
Read more

10 WAYS TO PROMOTE AND IMPROVE YOUR WEBSITE TRAFFIC

WEBSITE MEASUREMENT   Web traffic is measured to see the popularity of websites and personal pages or sections within a website. This is an automatically generated list of all pages that appear in the Traffic Statistics web file. The hit is generated when the file is provided. The page is considered a file, but the images are also files, so a page with 5 images can generate 6 hits (5 images and even a page). Page view is generated when a visitor requests any page on the website - the visitor always generates at least one page view (main page), but can create more. Track traffic can be recorded by inserting a small HTML code on each page of the website by tracking the external applications of the website. [2] Web traffic is sometimes measured by sniffing packets and thus random samples of traffic data are obtained, providing complete information about web traffic throughout Internet usage. The following types of information are often found when monitoring web traffic: [3]  ...
Post a Comment
Read more

Sonos sues Google for infringing 5 more non-wire A.K.A Wireless audio patents

 Sonos has filed another patent lawsuit against Google, alleging that giant search infringes five wireless patents across the Nest and Chromecast product line. The move comes on the eve of Google's hardware hardware event on September 30, with the announcement of the Chromecast and Nest smart speaker and new Pixel phones. Sonos filed its first patent lawsuit against Google in January in a California court and the International Trade Commission; The state lawsuit was suspended while the ITC reached a decision on whether to block Google products that allegedly violated market rules. The new lawsuit was filed only in a federal court in the Western District of Texas - a recent patent for a patent case - and it represents an aggressive approach from Sonos. "We think it's important to show the depth and breadth of Google's copy," said Eddie Lazarus, a law officer at Sonos. "We showed them the 100 patent charts which we said were infringing, all to no avail." G...
Post a Comment
Read more