Tag: malicious javascript

1 Attack Reports | 0 Vulnerabilities

Attack reports

Fake Browser Updates Targeting WordPress Administrators via Malicious Plugin

A malicious WordPress plugin named 'Modern Recent Posts' has been discovered, targeting administrators with fake browser update pop-ups. The plugin injects malicious JavaScript from an external domain, only affecting logged-in administrators on Windows machines. The campaign uses social engineering…
social engineering
persistence
browser updates
2026-01-08
malicious javascript
Published: January 8, 2026
Downloadable IOCs: 1
Click here to see more Attack Reports