Mossack Fonseca Breach – Old Plugin Version As Possible Cause
There is heaps of news coverage right now on the recent release of the Panama Papers. It is creating quite a stir and adding more weight behind the reform wall street movement, enabling the likes of Bernie Sanders to say, told you so.
The folks over at WordFence describe it thus,
“Mossack Fonseca (MF), the Panamanian law firm at the center of the so called Panama Papers Breach may have been breached via a vulnerable version of Revolution Slider. The data breach has so far brought down the Prime Minister of Iceland and surrounded Russian President Putin and British Prime Minister David Cameron with controversy, among other famous public figures. It is the largest data breach to journalists in history, weighing in at 2.6 terabytes and 11.5 million documents.”
They have also analyzed the Mossack Fonseca website and found that they are using an old version of a the Revolution Slider Plugin (v. 2.1.7). This is an older and vulnerable version of this plugin. Hackers would be able to use this vulnerability to easy breach the website. You can read their analysis in greater detail.
Two lessons here:
1) Be a good person and/or business.
2) Update your website’s software regularly.
Contact me and request a review of your website! I’ll review it and then suggest a customized and appropriate annual software maintenance service to keep things buttoned up and secure!
