Slow Fog Security Reminder: Beware of malicious attackers launching watering hole attacks exploiting WordPress plugin vulnerabilities

ChainCatcher message, recently attackers have exploited vulnerabilities in WordPress plugins to attack normal sites, injecting malicious js code into the sites, launching watering hole attacks that pop up malicious windows when users visit the site, tricking users into executing malicious code or signing Web3 wallets, thereby stealing users' assets.

It is recommended that sites using WordPress plugins check for vulnerabilities, update plugins in a timely manner to avoid being attacked; users should carefully identify the downloaded programs and the content of Web3 signatures when visiting any site to avoid downloading malicious programs or authorizing malicious signatures that could lead to asset theft.