Attackers Used UpdraftCentral Connections to Plant Hidden Plugins on WordPress Sites
TeamUpdraft says attackers who reached teamupdraft.com on October 17 and 18 used UpdraftCentral connections to add administrator accounts and hidden plugins to WordPress sites, and that disconnecting a site does not remove what was installed.