MonsterInsights Website Compromised And Sending Phishing Emails

MonsterInsights web site has been beneath assault, is claimed to have been hacked, and is sending phishing emails to its prospects. The free model of MonsterInsights is put in in over two million web sites and is claimed to be put in on a complete of three million websites.

MonsterInsights Underneath Assault

The official MonsterInsights web site is down and the house web page has been changed with the next discover:

“Our web site is offline as we’re mitigating an assault. Your analytics and monitoring aren’t affected.

Please DO NOT obtain MonsterInsights from any third celebration web site as there’s a recognized phishing try occurring proper now.

Thanks to your persistence.

When you’ve got any questions, please attain out to help@monsterinsights.com”

Screenshot Of MonsterInsights Web site

MonsterInsights

MonsterInsights is a WordPress plugin put in in over two million web sites. It connects to a consumer’s Google Analytics (GA) account and offers web site visitors insights inside a dashboard inside WordPress. It additionally allows companies to extra simply use GA’s advanced monitoring options. MonsterInsights additionally gives a Professional model of the plugin with extra options that may enchantment to ecommerce shops.

Experiences Of Phishing Emails Originating From MonsterInsights

Customers of the plugin are reporting having acquired phishing emails from MonsterInsights. Posts on Fb and X (previously Twitter) affirm that that is occurring.

@alliemims posted on X:

“I used to be coming right here to succeed in out as I received these phishing emails. I didn’t work together with them. I went to your website to attempt to report it through contact type however received a 403. Sorry to listen to you’re coping with this nonsense. Better of luck! 🙏”

@biancavandepoel tweeted:

“Is there a way you will get in contact together with your shoppers by e-mail ASAP? As a result of it looks as if the attackers already discovered them.”

MonsterInsights Response

MonsterInsights posted a response on X warning customers to not obtain or set up their plugin from some other web site, confirming that the emails are a phishing try.

“We’re presently mitigating an assault – DO NOT set up MonsterInsights from any third celebration web site as there’s a recognized phishing try occurring proper now.”

Featured Picture by Shutterstock/Sadi Hockmuller