<ul><li>A large-scale phishing campaign is targeting WordPress WooCommerce users.</li><li>Threat actors are using a fake security alert to distribute a 'critical patch' that actually contains a backdoor.</li><li>The phishing campaign resembles a previous attack from December 2023, with similarities in tactics and techniques.</li><li>Once the fake patch is downloaded, it creates a hidden administrator account and installs web shells, giving attackers full control over the server.</li></ul>

A large-scale phishing campaign targets WordPress WooCommerce users

Discover more