Breached Credit Union Comes Out of its Shell
Summary: A Web shell backdoor was found on Coast Central Credit Union's online banking site, a Eureka, California institution serving more than 60,000 customers, and had apparently been in place for nearly two months before it was disabled. Evidence suggested the site was compromised through an outdated version of Akeeba Backup, a Joomla component, with a backdoor file called "sfx.php" dropped on December 29, 2015.
Key Takeaway: Hold Security's Alex Holden found more than 13,000 sites infected with Web shells like this one, and all of them are being remotely controlled with the same username and password by self-replicating malware that exploits vulnerable sites and installs the backdoor with those shared credentials.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026