Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

Unknown threat actors breached TeamUpdraft's website, potentially gaining unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone. They used these keys to backdoor WordPress sites. TeamUpdraft develops UpdraftPlus, a popular backup plugin with over four million active installations, and also offers UpdraftCentral for remote management.