Experts warned of a new form of web attacks

Increased the number of attacks on sites running WordPress.

The company’s experts Wordfence found a new type of web-based attacks, in which attackers use incomplete installation of WordPress. That is, the attacks are based on sites where users have already downloaded the content management system (CMS) WordPress, music was never established it to the end. Such resources are opened for external connections, and anyone can obtain access to the control panel to complete the process of installation CMS.

According to Wordfence, from late may to mid-June of the current year has dramatically increased the number of scans of the Internet for WordPress installations with the installation file. The researchers found at least one hacker who has gained access to the site where the CMS was not installed until the end. Unknown uploaded username and password to your own database and completed the installation process. He thus secured the opportunity to manage the site through the newly created administrator account and using the file editor to inject and execute malicious code to gain control over someone else’s server. The attacker also installed my own plugin to execute malicious code.

Simultaneously with the increase in the number of scans in June 2017, increased the number of attacks on sites running WordPress. Most of the attacks had been launched from IP addresses in Russia, Ukraine and the United States.

© 2017, paradox. All rights reserved.