{"id":540,"date":"2025-03-06T08:50:53","date_gmt":"2025-03-06T08:50:53","guid":{"rendered":"https:\/\/familiebuckens.nl\/?p=540"},"modified":"2025-03-10T08:51:32","modified_gmt":"2025-03-10T08:51:32","slug":"over-1000-wordpress-sites-infected-with-javascript-backdoors-enabling-persistent-attacker-access","status":"publish","type":"post","link":"https:\/\/familiebuckens.nl\/index.php\/2025\/03\/06\/over-1000-wordpress-sites-infected-with-javascript-backdoors-enabling-persistent-attacker-access\/","title":{"rendered":"Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. &#8220;Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed,&#8221; c\/side researcher Himanshu Anand\u00a0<a href=\"https:\/\/cside.dev\/blog\/thousands-of-websites-hit-by-four-backdoors-in-3rd-party-javascript-attack\" target=\"_blank\" rel=\"noreferrer noopener\">said<\/a>\u00a0in a Wednesday analysis. The malicious JavaScript code has been found to be served via cdn.csyndication[.]com. As of writing, as many as\u00a0<a href=\"https:\/\/publicwww.com\/websites\/csyndication.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">908 websites<\/a>\u00a0contain references to the domain in question.<\/p>\n\n\n<a class=\"wp-block-read-more\" href=\"https:\/\/familiebuckens.nl\/index.php\/2025\/03\/06\/over-1000-wordpress-sites-infected-with-javascript-backdoors-enabling-persistent-attacker-access\/\" target=\"_self\"><a href=\"https:\/\/thehackernews.com\/2025\/03\/over-1000-wordpress-sites-infected-with.html\">Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access<\/a><span class=\"screen-reader-text\">: Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access<\/span><\/a>","protected":false},"excerpt":{"rendered":"<p>Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. &#8220;Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed,&#8221; c\/side researcher Himanshu Anand\u00a0said\u00a0in a Wednesday analysis. The malicious JavaScript code has been found&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[40],"class_list":["post-540","post","type-post","status-publish","format-standard","hentry","category-vulnerability","tag-40"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=540"}],"version-history":[{"count":1,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/540\/revisions"}],"predecessor-version":[{"id":541,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/540\/revisions\/541"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/categories?post=540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/tags?post=540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}