5個上架到WordPress.org市集的外掛程式遭到供應鏈攻擊，被植入惡意指令碼
支付動態 · 2024-06-26
資安業者Wordfence針對5款WordPress外掛程式用戶提出警告，指出這些外掛程式近日遭到供應鏈攻擊，它們被植入惡意程式碼並發布到官方市集，後續等用戶下載安裝之後，再藉此控制受害網站，並將其用於增加垃圾索引
專注於WordPress網站安全的資安業者Wordfence指出，他們本週留意到名為Social Warfare的外掛程式，近期被WordPress.org外掛程式市集的審查團隊發現，遭人植入惡意程式碼，Wordfence透過內部的威脅情報平臺進行比對，結果找到其他4個也被植入類似程式碼的外掛程式，他們向審查團隊通報此事，遭感染的外掛程式自24日暫停提供下載，但究竟駭客如何上傳這些有問題的外掛程式，研究人員表示並不清楚。
對此，他們也公布被植入惡意程式碼的外掛程式名稱及版本，這些外掛程式是：
●4.4.6.4至4.4.7.1版Social Warfare
●2.2.5至2.5.2版Blaze Widget
●1.0.2至1.0.3版Wrapper Link Element
●1.0.4至1.0.5版Contact Form 7 Multi-Step Addon
●1.2.1版Simply Show Hooks
值得留意的是，除了Social Warfare推出4.4.7.3版移除相關程式碼，Wrapper Link Element提供不含有關內容的1.0.0版，其餘開發者並未推出更新予以修補。
而對於攻擊者的動機，研究人員指出，一旦對方成功在網站植入惡意外掛程式，就會試圖建立新的管理員帳號，並將結果回傳駭客控制的伺服器。此外，駭客疑似藉由注入惡意JavaScript程式碼，透過網站增加搜尋引擎最佳化（SEO）的垃圾索引。
熱門文章
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
