Umair M.’s Post

I want to give you a heads-up about a recent security threat affecting WordPress websites. Cyber security researchers have discovered that a vulnerability in a lesser-known plugin, Dessky Snippets, is being exploited to steal customers' credit card details. Here's what's happening: Attackers are targeting online stores running on WordPress, using the Dessky Snippets plugin to insert malicious code. This code sneaks into the checkout process. It modifies the billing form at checkout, adding extra fields for names, addresses, credit card numbers, expiry dates, and CVV numbers. It even disables autocomplete to avoid raising red flags for customers. Their payment data can be stolen, leading to serious financial and reputational damage. WordPress is generally safe, but plugins and themes can be weak points if they’re not properly managed. How can you protect your site? - Only keep the plugins and themes you really need. Delete any you don't use. - Make sure all your plugins and themes are up to date. Updates often include important security patches. - Keep an eye out for unusual changes to your checkout process. Being proactive about your website's security can save you from a lot of headaches down the line. This is something my team can help with. You want to talk it through? Get in touch.

I want to give you a heads-up about a recent security threat affecting WordPress websites. Cyber security researchers have discovered that a vulnerability in a lesser-known plugin, Dessky Snippets, is being exploited to steal customers' credit card details. Here's what's happening: Attackers are targeting online stores running on WordPress, using the Dessky Snippets plugin to insert malicious code. This code sneaks into the checkout process. It modifies the billing form at checkout, adding extra fields for names, addresses, credit card numbers, expiry dates, and CVV numbers. It even disables autocomplete to avoid raising red flags for customers. Their payment data can be stolen, leading to serious financial and reputational damage. WordPress is generally safe, but plugins and themes can be weak points if they’re not properly managed. How can you protect your site? - Only keep the plugins and themes you really need. Delete any you don't use. - Make sure all your plugins and themes are up to date. Updates often include important security patches. - Keep an eye out for unusual changes to your checkout process. Being proactive about your website's security can save you from a lot of headaches down the line. This is something my team can help with. You want to talk it through? Get in touch.

I want to give you a heads-up about a recent security threat affecting WordPress websites. Cyber security researchers have discovered that a vulnerability in a lesser-known plugin, Dessky Snippets, is being exploited to steal customers' credit card details. Here's what's happening: Attackers are targeting online stores running on WordPress, using the Dessky Snippets plugin to insert malicious code. This code sneaks into the checkout process. It modifies the billing form at checkout, adding extra fields for names, addresses, credit card numbers, expiry dates, and CVV numbers. It even disables autocomplete to avoid raising red flags for customers. Their payment data can be stolen, leading to serious financial and reputational damage. WordPress is generally safe, but plugins and themes can be weak points if they’re not properly managed. How can you protect your site? - Only keep the plugins and themes you really need. Delete any you don't use. - Make sure all your plugins and themes are up to date. Updates often include important security patches. - Keep an eye out for unusual changes to your checkout process. Being proactive about your website's security can save you from a lot of headaches down the line. This is something my team can help with. You want to talk it through? Get in touch.

I want to give you a heads-up about a recent security threat affecting WordPress websites. Cyber security researchers have discovered that a vulnerability in a lesser-known plugin, Dessky Snippets, is being exploited to steal customers' credit card details. Here's what's happening: Attackers are targeting online stores running on WordPress, using the Dessky Snippets plugin to insert malicious code. This code sneaks into the checkout process. It modifies the billing form at checkout, adding extra fields for names, addresses, credit card numbers, expiry dates, and CVV numbers. It even disables autocomplete to avoid raising red flags for customers. Their payment data can be stolen, leading to serious financial and reputational damage. WordPress is generally safe, but plugins and themes can be weak points if they’re not properly managed. How can you protect your site? - Only keep the plugins and themes you really need. Delete any you don't use. - Make sure all your plugins and themes are up to date. Updates often include important security patches. - Keep an eye out for unusual changes to your checkout process. Being proactive about your website's security can save you from a lot of headaches down the line. This is something my team can help with. You want to talk it through? Get in touch.

I want to give you a heads-up about a recent security threat affecting WordPress websites. Cyber security researchers have discovered that a vulnerability in a lesser-known plugin, Dessky Snippets, is being exploited to steal customers' credit card details. Here's what's happening: Attackers are targeting online stores running on WordPress, using the Dessky Snippets plugin to insert malicious code. This code sneaks into the checkout process. It modifies the billing form at checkout, adding extra fields for names, addresses, credit card numbers, expiry dates, and CVV numbers. It even disables autocomplete to avoid raising red flags for customers. Their payment data can be stolen, leading to serious financial and reputational damage. WordPress is generally safe, but plugins and themes can be weak points if they’re not properly managed. How can you protect your site? - Only keep the plugins and themes you really need. Delete any you don't use. - Make sure all your plugins and themes are up to date. Updates often include important security patches. - Keep an eye out for unusual changes to your checkout process. Being proactive about your website's security can save you from a lot of headaches down the line. This is something my team can help with. You want to talk it through? Get in touch. https://lnkd.in/dh4X8cEG

I want to give you a heads-up about a recent security threat affecting WordPress websites. Cyber security researchers have discovered that a vulnerability in a lesser-known plugin, Dessky Snippets, is being exploited to steal customers' credit card details. Here's what's happening: Attackers are targeting online stores running on WordPress, using the Dessky Snippets plugin to insert malicious code. This code sneaks into the checkout process. It modifies the billing form at checkout, adding extra fields for names, addresses, credit card numbers, expiry dates, and CVV numbers. It even disables autocomplete to avoid raising red flags for customers. Their payment data can be stolen, leading to serious financial and reputational damage. WordPress is generally safe, but plugins and themes can be weak points if they’re not properly managed. How can you protect your site? - Only keep the plugins and themes you really need. Delete any you don't use. - Make sure all your plugins and themes are up to date. Updates often include important security patches. - Keep an eye out for unusual changes to your checkout process. Being proactive about your website's security can save you from a lot of headaches down the line. This is something my team can help with. You want to talk it through? Get in touch. https://lnkd.in/gvkcurA9

If you're on WordPress and using plugins, take a moment to read about the rising threat of supply chain attacks. The endless security issues we see with WordPress (and the clients who have come to us because they needed better security) is why we so strongly advocate to avoid WordPress & plugins at all costs. If you care about security, move away from WordPress, templates, frameworks and plugins. "WordPress is so easy to use anyone can do it" Yes, this is the problem. If anyone can do it, then it's harder to know when you have a trusted secure environment for your site built by professionals. These new kinds of attacks happen when the 3rd party software itself has been altered by malicious code. There are now 11 plugins that have been identified - see the list at the bottom of this article. "WordPress plugins continue to be under attack by hackers using stolen credentials (from other data breaches) to gain direct access to plugin code." 

Over 6,000 WordPress Hacked To Install Plugins Pushing Infostealers: WordPress sites are being compromised through malicious plugins that display fake software updates and error messages, leading to the installation of information-stealing malware. BleepingComputer reports: Since 2023, a malicious campaign called ClearFake has been used to display fake web browser update banners on compromised websites that distribute information-stealing malware. In 2024, a new campaign called ClickFix was introduced that shares many similarities with ClearFake but instead pretends to be software error messages with included fixes. However, these "fixes" are PowerShell scripts that, when executed, will download and install information-stealing malware. Last week, GoDaddy reported that the ClearFake/ClickFix threat actors have breached over 6,000 WordPress sites to install malicious plugins that display the fake alerts associated with these campaigns. "The GoDaddy Security team is tracking a new variant of ClickFix (also known as ClearFake) fake browser update malware that is distributed via bogus WordPress plugins," explains GoDaddy security researcher Denis Sinegubko. "These seemingly legitimate plugins are designed to appear harmless to website administrators but contain embedded malicious scripts that deliver fake browser update prompts to end-users." The malicious plugins utilize names similar to legitimate plugins, such as Wordfense Security and LiteSpeed Cache, while others use generic, made-up names. Website security firm Sucuri also noted that a fake plugin named "Universal Popup Plugin" is also part of this campaign. When installed, the malicious plugin will hook various WordPress actions depending on the variant to inject a malicious JavaScript script into the HTML of the site. When loaded, this script will attempt to load a further malicious JavaScript file stored in a Binance Smart Chain (BSC) smart contract, which then loads the ClearFake or ClickFix script to display the fake banners. From web server access logs analyzed by Sinegubko, the threat actors appear to be utilizing stolen admin credentials to log into the WordPress site and install the plugin in an automated manner. Read more of this story at Slashdot.

Over 6,000 WordPress Hacked To Install Plugins Pushing Infostealers: WordPress sites are being compromised through malicious plugins that display fake software updates and error messages, leading to the installation of information-stealing malware. BleepingComputer reports: Since 2023, a malicious campaign called ClearFake has been used to display fake web browser update banners on compromised websites that distribute information-stealing malware. In 2024, a new campaign called ClickFix was introduced that shares many similarities with ClearFake but instead pretends to be software error messages with included fixes. However, these "fixes" are PowerShell scripts that, when executed, will download and install information-stealing malware. Last week, GoDaddy reported that the ClearFake/ClickFix threat actors have breached over 6,000 WordPress sites to install malicious plugins that display the fake alerts associated with these campaigns. "The GoDaddy Security team is tracking a new variant of ClickFix (also known as ClearFake) fake browser update malware that is distributed via bogus WordPress plugins," explains GoDaddy security researcher Denis Sinegubko. "These seemingly legitimate plugins are designed to appear harmless to website administrators but contain embedded malicious scripts that deliver fake browser update prompts to end-users." The malicious plugins utilize names similar to legitimate plugins, such as Wordfense Security and LiteSpeed Cache, while others use generic, made-up names. Website security firm Sucuri also noted that a fake plugin named "Universal Popup Plugin" is also part of this campaign. When installed, the malicious plugin will hook various WordPress actions depending on the variant to inject a malicious JavaScript script into the HTML of the site. When loaded, this script will attempt to load a further malicious JavaScript file stored in a Binance Smart Chain (BSC) smart contract, which then loads the ClearFake or ClickFix script to display the fake banners. From web server access logs analyzed by Sinegubko, the threat actors appear to be utilizing stolen admin credentials to log into the WordPress site and install the plugin in an automated manner. Read more of this story at Slashdot.

🚨 Hackers break into 4,764,560 WordPress websites every year. But my agency still builds most of our clients' websites on WordPress. Why would we take that risk? Because WordPress isn’t the problem—SLOPPY development is. Anyone can throw up a WordPress site with a cheap template and leave your business completely exposed. When hackers strike, it’s you who pays the price—with lost customers, damaged reputation, and lost revenue. 🚨Want to bulletproof your site and protect your company's reputation?🚨 Here's exactly what you need to do: •Skip templates and go custom to avoid bloated, vulnerable code. • Use strong, unique passwords for every login. • Keep WordPress, themes, and plugins updated. • Limit login attempts to block brute-force attacks. • Install a trusted security plugin. • Delete unused themes and plugins. Your site’s either secure, or it’s a ticking time bomb. Don't wait to find out. Secure your site before it's too late.