Credentials for ManageWP, GoDaddy’s platform for managing fleets of WordPress websites, are the focus of a phishing campaign that is distributed through Google sponsored search results.
The phony login page serves as a real-time proxy between the victim and the authentic ManageWP service as part of the threat actor’s adversary-in-the-middle (AitM) technique.
Instead of login into different dashboards, customers can administer many WordPress websites from a single panel with ManageWP, a centralized remote administration tool. Web developers, web agencies that manage client websites, and businesses are typical users.
Guardio Labs researchers caution that users who depend on Google to get the URL for logging into ManageWP are tricked by the phony result that appears above the actual one for the ‘managewp’ query.
When users click on the fraudulent result, they are redirected to an identical login page read more about Hackers abuse Google ads for GoDaddy ManageWP login phishing.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.