Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Summary
The paid version of the WordPress SEO plugin Rank Math PRO was compromised and delivered malware to users who downloaded it between October 15th and 16th. The compromised plugin contained a self-restoring backdoor, meaning any site that installed it should be considered compromised.
IFF Assessment
The compromise of a popular WordPress plugin and the distribution of malware represent a direct threat to websites and their data, making it bad news for defenders.
Defender Context
This incident highlights the risks associated with software supply chain attacks targeting popular plugins, even for paid versions. Defenders should maintain vigilance regarding updates for critical WordPress plugins and implement robust monitoring for any signs of compromise. Promptly patching and auditing systems after such incidents are crucial steps.