/
attack_type:backdoor × latest_source_host:gbhackers.com × limpar

Resultados

3 casos · pág. 1/1

gbhackers.com · high

UNC7017 hijacks AOMEI update infrastructure to deliver CROSSROAD downloader and SHINYROAD backdoor

A supply chain campaign tracked as UNC7017 hijacked the update infrastructure of AOMEI Technology between April and July 2026 to distribute the CROSSROAD downloader and the SHINYROAD backdoor through AOMEI Backupper and AnyViewer update workflows. The attackers tampered with server configurations only briefly, then restored legitimate con…

gbhackers.com · · 3 fontes · 3 atualizações critical

Attackers abuse stolen UpdraftCentral keys from TeamUpdraft breach to install malicious plugins on WordPress sites

Attackers used UpdraftCentral connection keys exposed in an October 17-18, 2026 breach of the TeamUpdraft website to send validly signed remote-management commands to WordPress sites running UpdraftPlus. The commands installed malicious plugins that give unauthorized access, and Wordfence also saw attempts to delete existing plugins. Team…