
- Malicious actor bought 31 WordPress plugins from Essential Plugin
- Updates injected backdoors, granting full site access
- Spam campaigns hidden from owners, C2 resolved via Ethereum smart contract
A hacker bought more than 30 legitimate WordPress plugins and abused their good standing to infect tens of thousands of websites with backdoors.