THOUSANDS OF WEBSITES HIT BY FOUR BACKDOORS IN 3RD PARTY JAVASCRIPT ATTACK

Summary from the TLDR InfoSec newsletter

Attackers exploited a third-party JavaScript file to inject four backdoors into 1,000 WordPress websites. The attack involved uploading malicious plugins, injecting SSH keys, and executing remote commands.