Linux malware targets WordPress websites by exploiting 30 vulnerabilities found in a variety of themes.
Researchers have warned users of a new Linux malware that targets WordPress websites with malicious JavaScript. The malware is actively targeting WordPress websites. It is identified as Linux.BackDoor.WordPressExploit.1 and targets both 32-bit and 64-bit Linux versions.
The malware is not peculiar in that it the malware basically serves as a backdoor for the attackers to gain access to the target sites. This is done by exploiting 30 vulnerabilities across various WordPress plugins and themes.
The malware works by exploiting vulnerabilities in the unpatched plugins. The malware then allows the attacker to inject the target site with malicious JavaScript codes.
These malicious scripts would then redirect website users to the attackers’ sites to execute phishing attacks. The malware can also be paused by the attackers who can set it to standby mode or even shut down.
Websites running unpatched versions of these plugins are at risk:
- WP Live Chat Support Plugin
- Easysmtp
- WordPress – Yuzo Related Posts
- WP GDPR Compliance Plugin
- Yellow Pencil Visual Theme Customizer Plugin
- Newspaper Theme on WordPress Access Control (vulnerability CVE-2016-10972)
- Google Code Inserter
- Total Donations Plugin
- Thim Core
- Post Custom Templates Lite
- WP Quick Booking Manager
- Blog Designer WordPress Plugin
- Facebook Live Chat by Zotabox
- WordPress Ultimate FAQ (vulnerabilities CVE-2019-17232 and CVE-2019-17233)
- WordPress ND Shortcodes For Visual Composer
- WP-Matomo Integration (WP-Piwik)
- WP Live Chat
- Hybrid
- Coming Soon Page and Maintenance Mode
There is also another variant called Linux.BackDoor.WordPressExploit.2, that exploits more vulnerabilities in the following plugins.
- WooCommerce WordPress
- Coming Soon Page
- Brizy WordPress Plugin
- FV Flowplayer Video Player
- WordPress theme OneTone
- Simple Fields WordPress Plugin
- Poll, Survey, Form & Quiz Maker by OpinionStage
- WordPress Delucks SEO plugin
- Social Metrics Tracker
- Rich Reviews plugin
- WPeMatico RSS Feed Fetcher
Found this article interesting? Follow Brightwhiz on Facebook, Twitter, and YouTube to read and watch more content we post.