WordPress Admin Credentials Exposed by Pro-Russian Cyber Threat Group

On February 5, a pro-Russian cyber threat group known as NetSide posted the administrative credentials for around 1,000 WordPress sites on a Telegram channel. WordPress administrators are advised to change their passwords and enable multi-factor authentication (MFA). The exposure of these credentials comes shortly after a collective of pro-Russian cyber threat groups, including NetSide and KillNet, targeted US healthcare websites and German government, airport, and financial websites with distributed denial-of-service (DDOS) attacks following the decision by both nations to send tanks to Ukrainian armed forces. Similar cyber threat activity is likely to continue targeting nations and organizations supporting Ukraine.