Attackers Hijack Popular WordPress Plugins to Deploy Backdoors
2026-06-15T20:52:17Z•8aee4856c415019a85b1705344cade6770b3a08338fb654db310010c7594dad2
CVE-2026-11645agentjackinganubisasyncRATaudiA6backdoorcheck-pointchromecrypto-launderingeverest-formsmaritime-securitymicrosoft-patch-tuesdaynpmoptinmonsterphishingphpBBprompt-injection','ai-security','anthropic','fable5','mythos5','ransomwaresilabratsniperdzsoftware-supply-chainsupply-chainvidarwordpresszero-day
What happened
Multiple high-impact cyber incidents and vulnerabilities reported: attackers compromised popular WordPress plugins (OptinMonster and sisters) to plant backdoors on ~1.2M sites, while Anubis ransomware actors stole and leaked port authority data. Law enforcement seized the AudiA6 crypto-laundering platform; large-scale supply-chain and malware campaigns (AsyncRAT, Vidar, SilabRAT) and phishing-as-a-service (SniperDz) remain active. Vendors released urgent fixes — Google patched Chrome (CVE-2026-11645) and Microsoft fixed ~200 CVEs including three zero-days — and Check Point, phpBB and Everest F
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- 8aee4856c415019a85b1705344cade6770b3a08338fb654db310010c7594dad2
- Enrichment time
- 2026-06-15T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.