Active Conflicts & News MegaThread March 10, 2025

The r/CredibleDefense daily megathread is for asking questions and posting submissions that would not fit the criteria of our post submissions. As such, submissions are less stringently moderated, but we still do keep an elevated guideline for comments.

Comment guidelines:

Please do:

* Be curious not judgmental, polite and civil,

* Link to the article or source of information that you are referring to,

* Clearly separate your opinion from what the source says. Minimize editorializing. Do not cherry pick facts to support a preferred narrative,

* Read the articles before you comment, and comment on the content of the articles,

* Post only credible information

* Read our in depth rules https://reddit.com/r/CredibleDefense/wiki/rules.

Please do not:

* Use memes, emojis, swear, foul imagery, acronyms like LOL, LMAO, WTF,

* Start fights with other commenters and make it personal,

* Try to push narratives, fight for a cause in the comment section, nor try to ‘win the war,’

* Engage in baseless speculation, fear mongering, or anxiety posting. Question asking is welcome and encouraged, but questions should focus on tangible issues and not groundless hypothetical scenarios. Before asking a question ask yourself ‘How likely is this thing to occur.’ Questions, like other kinds of comments, should be supported by evidence and must maintain the burden of credibility.

submitted by /u/AutoModerator
[link] [comments]

March 10, 2025
Read More >>

Thousands of WordPress Websites Infected with Malware

The malware includes four separate backdoors:

Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed. A unique case we haven’t seen before. Which introduces another type of attack made possibly by abusing websites that don’t monitor 3rd party dependencies in the browser of their users.

The four backdoors:

The functions of the four backdoors are explained below:

  • Backdoor 1, which uploads and installs a fake plugin named “Ultra SEO Processor,” which is then used to execute attacker-issued commands
March 10, 2025
Read More >>