Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
BDThemes WordPress Supply Chain Attack Creates Rogue Admins and Deploys Webshells
Excerpt
A supply chain compromise has hit BdThemes, a popular WordPress plugin vendor, allowing attackers to silently create rogue administrator accounts and install webshells on affected sites without modifying a single line of plugin code. The Wordfence Team was alerted to the campaign on August 7, 2026, and all impacted plugins have since been pulled from the WordPress repository pending investigation. Unlike conventional plugin supply chain breaches, no source code in the…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | ia-cdn.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…