Dynamic Concepts, Inc. Blog WooCommerce admins targeted by fake security patches that hijack sites

A large-scale phishing campaign targets WooCommerce users with a fake security alert urging them to download a "critical patch" that adds a WordPress backdoor to the site. Recipients that take the bait and download the update are actually installing a malicious plugin that creates a hidden admin account on their website, downloads web shell payloads, and maintains [...]The post WooCommerce admins targeted by fake security patches that hijack sites appeared first on Dynamic Concepts.