CRITICAL: Smart Slider 3 Pro Users Hit With Supply Chain Backdoor Through Hijacked Update System
Attackers hijacked the official update infrastructure for Smart Slider 3 Pro, a WordPress plugin with 800,000+ installations, and pushed a weaponized backdoor during a six-hour window. The malware creates hidden admin accounts, achieves pre-auth RCE, and exfiltrates credentials to C2 servers.