Google Blocks Thousands of WordPress Sites Infected By SoakSoak [...]
Google Blocks Thousands of WordPress Sites Infected By SoakSoak Malware
📅 - Google has blocked more than 11,000 websites from its search engine that have been affected by the recent WordPress malware.
The SoakSoak malware, discovered by security firm Sucuri, could have compromised more than 100,000 sites running WordPress, said Sucuri via blog post.
According to a report from The Guardian, the flaw was discovered in the RevSlider third party plug-in, in which the attackers load a Javascript malware from the soaksoak.ru domain.
“The biggest issue is that the RevSlider plugin is a premium plugin, it's not something everyone can easily upgrade and that in itself becomes a disaster for website owner,” stated Sucuri. “Some website owners don't even know they have it as it's been packaged and bundled into their themes. We're currently remediating thousands of sites and when engaging with our clients many had no idea the plugin was even within their environment.”
CBROnline reported that the makers of the RevSlider, ThemePunch, discovered the flaw in February, noting that more than 29 security fixes have been released from February through September.
The SoakSoak malware, discovered by security firm Sucuri, could have compromised more than 100,000 sites running WordPress, said Sucuri via blog post.
According to a report from The Guardian, the flaw was discovered in the RevSlider third party plug-in, in which the attackers load a Javascript malware from the soaksoak.ru domain.
“The biggest issue is that the RevSlider plugin is a premium plugin, it's not something everyone can easily upgrade and that in itself becomes a disaster for website owner,” stated Sucuri. “Some website owners don't even know they have it as it's been packaged and bundled into their themes. We're currently remediating thousands of sites and when engaging with our clients many had no idea the plugin was even within their environment.”
CBROnline reported that the makers of the RevSlider, ThemePunch, discovered the flaw in February, noting that more than 29 security fixes have been released from February through September.
Reads: 1339 | Category: General | Source: TheHN : The Hosting News
Want to add a website news or press release ? Just do it, it's free! Use add web hosting news!