Loading...
Market
Story
Supply Chain Attack on Polyfill.io and WordPress Plugins Impacts Over 100,000 Websites
Jun 26, 2024, 05:06 AM
A significant supply chain attack has impacted over 100,000 websites using the Polyfill.io service. The attack began after the domain was acquired by the Chinese company 'Funnull,' which injected malicious code into the service. This code redirected visitors to unwanted sites without the website owners' knowledge. The attack has also affected WordPress plugins, with as many as 36,000 sites compromised. Security experts are advising immediate removal of the Polyfill.io code from affected websites to mitigate the risk. The cdn.polyfill.io domain is currently being used in the attack, and experts have called on Namecheap to take action. The attack was reported by darkreading.
View original story
Similar markets
Phishing • 25%
Direct network attack • 25%
Malware installation • 25%
Other • 25%
Phishing emails • 25%
Malicious websites • 25%
Compromised software updates • 25%
Other • 25%
Bypassing user consent • 25%
Terminal redirection • 25%
Gatekeeper bypass • 25%
Other method • 25%
Phishing attacks • 25%
Direct server exploitation • 25%
Malware distribution • 25%
Other • 25%
Botnet of hijacked routers • 25%
Compromised DVRs • 25%
Compromised web servers • 25%
Other • 25%
Cloud services • 25%
Email phishing • 25%
Social engineering • 25%
Other • 25%
Phishing emails • 25%
Compromised software downloads • 25%
Malicious websites • 25%
Other • 25%
Phishing • 25%
Zero-day exploits • 25%
Malware • 25%
Other • 25%
Kernel Rootkit • 25%
SSDT Hook • 25%
Infinityhook • 25%
Other • 25%
Smishing • 25%
SIM swapping • 25%
Phishing • 25%
Other • 25%
DuoExchange • 25%
The victim • 25%
Unknown third party • 25%
No clear blame • 25%
Router vulnerabilities • 25%
Camera vulnerabilities • 25%
Other internet-connected devices • 25%
Unknown/Multiple methods • 25%