Threat Actors Exploit Compromised UpdraftCentral Keys to Deploy Backdoors on WordPress Sites

Unknown attackers compromised TeamUpdraft's website and gained unauthorized access to customers' connection credentials for UpdraftCentral, UpdraftVault,…

If you use UpdraftPlus, UpdraftCentral, UpdraftVault, or UpdraftClone, immediately verify whether your connection credentials have been compromised. Rotate all remote access keys without delay and audit WordPress activity logs for unauthorized access or modifications. Monitor TeamUpdraft's official communications for specific remediation guidance.