STOLEN UPDRAFTCENTRAL KEYS USED TO BACKDOOR WORDPRESS SITES

Summary from the TLDR InfoSec newsletter

A threat actor breached the popular WordPress backup and security plugin developer TeamUpdraft's customer database. In addition to customer billing and order history, the attackers also stole password hashes, two-factor authentication information, and connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone services. These connection keys can be used to remotely issue commands to vulnerable websites.