phishing url's and site taken offline

Hi Anchevr,

Thanks for posting your find, as this particular incident has never been reported with the plugin. With fishing attacks it is possible that attackers can use any location on your server. They make have just picked this one by chance. I would definitely keep an eye on all areas of your server over the next few months and be sure your security plugins are installed and up to-date…

I love Duplicator and use it often.
but what I do is activate it, use it, then download backup files.
then delete backup files off server and deactivate Duplicator.

That what if you see something like this then you would have a better idea if it is actually the plugin or some phishing attack anyway..

I just saw a note about some security issues in last week’s version (0.5.14 and older) so that may have been the source.

Hey Guys,

The Security fix after 0.5.16 was for a possible SQL injection attack. There is a very small probability that it could attribute to the phishing issue. No other users have reported the issue at this point, so it is difficult to know for sure… With that said it is very important to update all your plugin versions with every release to the latest version; as it is with every other plugin, WP and software in general…