Open-source program Piwik is implanted with malicious code

Hackers intrude into the Web server of the open source analysis software Piwik and implant malicious code. The project maintainer issued a warning to the user who downloaded and installed Piwik 1.9.2 on Monday. Versions downloaded from UTC to UTC on Monday were found to contain backdoors, causing the server to send data to prostoivse.com. Attackers intrude into Piwik.org server by exploiting an undisclosed security leak of WordPress plug-ins. Piwik users who want to confirm whether the backdoor version is running can open the file piwik/core/Loader. php and find whether the file contains base-64 encoded text.

Piwik details: click here
Piwik: click here