group[.]oneDomain
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 5 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor“Rank Math, part of the Swedish hosting group group[.]one, has not said how the malicious files entered its download and update system, how many customers received one, whether automatic updates delivered them, or what the clean and tainted packages' hashes are.”
Indicators reported together
named in the same reports- rank1cdn[.]comin 1 report
- rankmath[.]comin 1 report
- wp-mail[.]netin 1 report
Copy these 3 indicators · defanged
Also named with it: CVE-2026-111862
Thanks — we review every report.