Ongoing Balada Injector campaign has infected one million WordPress sites since 2017

The campaign exploits "all known and recently discovered theme and plugin vulnerabilities" to inject a Linux backdoor that can obtain critical information on the compromised websites.

backdoor balada injector campaign compromised critical exploits information inject injector linux malware plugin theme vulnerabilities vulnerability management websites wordpress