TeamUpdraft

TeamUpdraft, the developer of popular WordPress backup and management plugins, has disclosed that an attacker gained unauthorized access to its website and stole UpdraftCentral connection keys, which can send commands to connected websites. Security researchers say attackers are already using the stolen keys to install backdoors on WordPress sites, including fully patched ones, in a campaign that could affect roughly 400,000 websites.