A large-scale phishing campaign targets WooCommerce users with a fake security alert urging them to download a "critical patch" that adds a Wordpress backdoor to the site. Recipients that take the ...

Patchstack spotted a new phishing campaign targeting WooCommerce users The email warns the users about a "critical vulnerability" that must be fixed The "fix" is actually malware that creates a rogue ...

Automattic, the company behind the WordPress content management system, is force installing a security update on hundreds of thousands of websites running the highly popular WooCommerce Payments for ...

The payment-card stealer differs from typical malware targeting WordPress-based e-commerce environments. Credit-card-stealing criminals have set their sights on the WordPress plugin known as ...