WordPress, the most popular content management system in the world, continues to lead the number of infected websites. Approximately 16,000 websites have been compromised this year alone. The majority of the websites breached, about three quarters of them, were backdoored meaning hackers were able to gain a new way of loading malicious payloads, target visitors and use websites for other attacks. However, hackers also commonly take advantage of out-of-date software, and researchers found that WordPress installations were out-of-date 55% of the time.
A new keylogger, iSpy, is available for sale on the dark web for $25, $35 or $45, depending on which package you want. It captures keystrokes, passwords stored in web browsers, records Skype chats, takes webcam screen shots and steals the license keys of software, such as Microsoft Office and Adobe Photoshop. iSpy is distributed like many other malware tools, malicious attachment in spam email. In addition, it supports features designed to make it difficult to detect and delete it.
*IP addresses provided by Recorded Future.
Want to learn about Alert Logic products in more detail? Call us direct at +1.877.484.8383, for the UK call +44 (0) 203 011 5533, or complete this form. An Alert Logic representative will contact you soon.