WordPress SEO plugin Rank Math compromised to backdoor websites
Summary
The Rank Math PRO WordPress plugin was compromised, with some downloads from its official website containing malware that installed hidden backdoors. This supply-chain attack likely impacted numerous websites relying on the popular SEO plugin for their WordPress sites.
IFF Assessment
This incident represents a supply-chain attack that injected malware into a widely used WordPress plugin, directly compromising websites and creating security risks for defenders.
Defender Context
This supply-chain attack highlights the critical need for organizations to verify the integrity of software downloads, especially for plugins and extensions on widely used platforms like WordPress. Defenders should monitor for unusual activity on WordPress sites that utilize Rank Math PRO and ensure they are applying security patches and best practices to mitigate the risk of backdoors.