Stolen plugin keys used to plant backdoors
Attackers used stolen UpdraftCentral connection keys from TeamUpdraft's breached website to install backdoors on connected WordPress sites. The report concerns the cloud management service; installing UpdraftPlus alone does not establish that a site was affected.
Read coverage about UpdraftCentral (opens in a new tab)
