FindMyHost

Web Hosting News

AHosting Warns Of Increased Malware Risk From Infected WordPress Themes

AHosting Warns Of Increased Malware Risk From Infected WordPress Themes
January 26
13:00 2015

Hudson, FL – AHosting, a provider of high-performance CMS hosting, has released an advisory notice warning WordPress users that a large number of sites have recently been infected by malware such as CryptoPHP, including over 20,000 WordPress sites in the last month. AHosting has cautioned WordPress users to take care when using free themes in WordPress and to avoid using pirate premium themes at all costs.

Themes that do not originate from verified theme directories and developers can contain malware which puts sites and their users at risk. As a provider of CMS hosting, including WordPress hosting, AHosting is well placed to observe the current state of the free WordPress theme ecosystem. While there are many excellent free themes available from reputable sources, the company has concerns that users who are unfamiliar with the risks may be influenced to install themes that contain malicious code or spammy links.


“WordPress has created an inclusive platform that allows anyone to create a presence on the web,” commented Daniel Page, Director of Business Development at AHosting, Inc., “Criminals are taking advantage of inexperienced users by injecting malicious code such as backdoors into themes and plugins, then making them available online. We’d like to make users aware of the risks and point them in the direction of verified, safe resources for obtaining free themes.”

WordPress is hugely popular, which makes it a tempting target for online criminals. The easiest way for them to infect a site is to let WordPress users do it themselves. AHosting has strongly advised that WordPress users do not install free themes that they discover through search engines. Instead they should use recognized WordPress theme repositories or ensure that they obtain themes from reputable developers.

Over 20,000 WordPress sites were recently identified as being infected by the CryptoPHP malware, which inserts a backdoor into WordPress that allows online criminals to take control of infected sites. Online criminals continue to use this successful technique and WordPress users remain at considerable risk. The primary vector for CryptoPHP infection is free and pirate premium themes. The only safe way to deal with infections of this type is a complete reinstall of the content management system, which can cause serious disruption and lost revenue for site owners.

There are many thousands of free WordPress themes that are entirely safe to use. WordPress users should take all necessary precautions and ensure that, when installing a new theme, they are certain it originates from a trustworthy source.

About Ahosting:
AHosting is a managed web hosting provider with facilities in Orlando, FL, and Detroit, MI, owned and operated by AHosting, Inc., supplying hosting services that are truly beyond imagination. Since 2002, AHosting has established one of the web’s premier solutions for specialized CMS hosting, including WordPress, Joomla!, and Drupal hosting; reseller web hosting, multiple IP hosting, dedicated servers, and VPS hosting. For more information, visit www.ahosting.net

Research, evaluate and learn more about shared web Hosting at FindMyHost.com.

About Author

FindMyHost Editor

FindMyHost Editor

The 'Web Hosting Blog' at FindMyHost.com was established to provide the web hosting industry with the very latest in news, technology, interviews, event information and more. About FindMyHost.com: Launched in January 2001 to protect Web Host Consumers and Web Developers from making the wrong choice when choosing a Web host. FindMyHost.com showcases a selection of web hosting companies who have undergone our Approved Host program testing and provides reviews from customers.

Related Articles

0 Comments

No Comments Yet!

There are no comments at the moment, do you want to add one?

Write a comment

Write a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.