Summary

Attackers are using stolen connection keys exposed in a TeamUpdraft security breach to install malicious plugins on affected WordPress sites and establish persistent access. Sites already compromised may remain at risk even after the exposed credentials are revoked. The attacks followed unauthorized access to TeamUpdraft’s website. The company, which develops the UpdraftPlus backup plugin and related WordPress management services, confirmed that its customer database was likely accessed.

AI summaries can be wrong sometimes—always verify important details using the source article.