Security · Updated 19 Oct, 09:58 pm IST
Rank Math PRO update contained self-restoring backdoor for one-day window
Why it matters for readers: It's an example of how a single malicious update can give attackers long-term access to websites.
- Paid copies of Rank Math PRO downloaded or updated from rankmath.com during a ~11-hour window on Oct 15–16 contained malware.1
- The malware can recreate a hidden backdoor whenever someone visits an infected site, so any site that installed and activated an affected copy should be treated as compromised.1
- Rank Math removed the affected files and published a clean release, version 3.0.124, but installing it does not remove files, admin accounts, or scheduled tasks the malware may have already placed.1
- The version number alone does not show whether a copy is affected; the vendor limits the incident to copies downloaded or updated during the specified window.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started