Security News > 2024 > January > Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability
![Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability](/static/build/img/news/balada-injector-infects-over-7100-wordpress-sites-using-plugin-vulnerability-medium.jpg)
2024-01-15 07:45
Thousands of WordPress sites using a vulnerable version of the Popup Builder plugin have been compromised with a malware called Balada Injector. First documented by Doctor Web in January 2023, the campaign takes place in a series of periodic attack waves, weaponizing security flaws WordPress plugins to inject backdoor designed to redirect visitors of infected sites to bogus tech
News URL
https://thehackernews.com/2024/01/balada-injector-infects-over-7100.html