Hacker installing Login Wall

  • madoracle7

    (@madoracle7)


    11 years ago

    I have been tracking the source of a mysterious installation of this plugin on a site I manage. It has occurred several times over the last weeks and I finally traced it to the site having been breached. The hacker has gained one of the admin credentials and seems insistent on installing Login Wall plugin amongst other things. The last instance was sourced at IP address 222.91.195.227 in China.

  • The topic ‘Hacker installing Login Wall’ is closed to new replies.