Alert: Malicious Plugin Targeting WordPress Admins
Recently, a concerning case surfaced involving fake browser update notifications appearing on WordPress sites, specifically when site owners logged into the admin dashboard. These alerts were linked to a malicious plugin called Modern Recent Posts, which masquerades as a harmless widget but executes harmful scripts.
This issue is critical because it compromises site security and can potentially lead to the installation of malware on the admin’s computer. The attackers aim to exploit trust by tricking users into downloading dangerous software.
To protect your site, remove any unfamiliar plugins, especially Modern Recent Posts. Audit user accounts and change all passwords associated with your site. If you clicked on any suspicious notifications, ensure you run a thorough antivirus scan on your device. Always verify the source of any software updates to avoid falling victim to such attacks.
Source: View Original Report
