Stolen UpdraftCentral keys used to backdoor WordPress sites
TeamUpdraft says its site was breached on October 17-18, and attackers installed backdoor plugins for about 18 hours.
78
Organization
Nethemba
- Mentions · 7d5
- Mentions · 30d5
- All mentions5
- First seenOct 19, 2026
- Last mentioned4d ago
Timeline
5 articles · newest firstStolen UpdraftCentral keys used to install malicious WordPress plugins
TeamUpdraft suspects an October 17-18 website breach exposed connection keys; 1.26.13 and 2.26.13 disconnect older links.
74
TeamUpdraft breach exposed keys used to backdoor WordPress sites
Exposed data reportedly included password hashes, billing details, and keys for UpdraftCentral, UpdraftVault, and UpdraftClone.
74
Stolen UpdraftCentral keys used to install malicious WordPress plugins
TeamUpdraft says its site was accessed October 17–18 and the database held UpdraftCentral, Vault, and Clone keys.
78
Stolen UpdraftCentral keys used to backdoor WordPress sites
Signed commands installed backdoor plugins from October 18 to 19; no plugin update stops it, so sites must delete UpdraftCentral keys.
78
Appears with
- TeamUpdraftvendor · 5
- UpdraftCentralproduct · 5
- UpdraftPlusproduct · 5
- UpdraftVaultproduct · 3
- UpdraftCloneproduct · 3
- Wordfenceorganization · 2
- Patchstackorganization · 2
- WordPressproduct · 1
- Information Commissioner's Officeorganization · 1
- TeamUpdraftvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.