During the past 48 hours WordFence has seen a marked increase in scans on WordPress websites that attempt to locate and steal SSH private keys.
Today on the blog we discuss SSH keys: a reminder of how they work, how to keep them secure, and how private keys can become public. We also discuss how attackers can locate targets to sign in using private SSH keys. And we share data showing the increase in SSH private key scans.