Developer Accounts Compromised Due to Credential Reuse in WordPress.org Supply Chain Attack

On June 24th, 2024, the Wordfence Threat Intelligence Team became aware of a WordPress plugin, Social Warfare, that was infected with malware through the WordPress repository. Upon further investigation, our team quickly identified 4 additional affected plugins through our internal Threat Intelligence platform. We immediately notified the WordPress Plugin’s Team and they removed the malicious ...
Read More

The post Developer Accounts Compromised Due to Credential Reuse in WordPress.org Supply Chain Attack appeared first on Wordfence.

accounts attack aware compromised credential credential reuse developer intelligence internal investigation june malware org platform plugin plugins quickly repository reuse social supply supply chain supply chain attack team threat threat intelligence threat intelligence platform threat research warfare wordfence wordpress wordpress plugin wordpress security