Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

Unknown threat actors breached the website of TeamUpdraft, the developer of the popular WordPress backup plugin UpdraftPlus, and may have obtained unauthorized access to customer connection keys. These keys are used for UpdraftCentral, UpdraftVault, and UpdraftClone, and the attackers are using them to plant backdoors on WordPress sites. TeamUpdraft's UpdraftPlus plugin has over four million active installations, and the company also offers UpdraftCentral, a remote management tool. The breach has allowed attackers to gain access to customer sites, potentially compromising their security. The incident highlights a vulnerability in the UpdraftCentral system, which is used to manage WordPress sites remotely.