# N1909: El astuto caso del Ransomware en WordPress — Nestor Angulo de Ugarte

> A real WordPress ransomware case solved like a detective story, with clues, analysis and countermeasures.

Canonical: https://nestorangulo.pro/speaking/irun-2022-ransomware-n1909/

- Format: Conference Talk
- Event: WordCamp Irun 2022
- Location: Irun, Spain
- Date: 2022-05-21 (May 21, 2022)
- Language: Spanish (Español)
- Speaker: [Nestor Angulo de Ugarte](https://nestorangulo.pro/about/)
- Themes: Malware, Incident Response, WordPress Security
- Video: [Watch video](https://wordpress.tv/2022/05/24/nestor-angulo-ugarte-n1909-astuto-caso-ransomware-wordpress/)
- Slides: [View slides (PDF)](https://assets.nestorangulo.pro/slides/irun-2022-ransomware-n1909-c9dfe50648.pdf)
- Slides on the event site: [Event-hosted slides](https://drive.google.com/file/d/1Bk2fzNf8GU7NI-zmuQ5AEQs6tt2a6Jdf/view?usp=sharing)

"Horacio, what are you doing here? The police are handling this case." "I'm not sure — someone hired me anonymously to solve it. Can I help?" Let's dig into this intriguing case of ransomware in WordPress and how it was solved. We'll uncover some interesting clues, learn a few tricks, and weigh the countermeasures to avoid this situation in the future.

> _English translation, provided for accessibility. This talk was delivered in Spanish; the original abstract is available via the video link above. Translation is best-effort and may contain errors._

**Original (Español)**

– Horacio, ¿qué haces aquí? La policía está a cargo de este caso. – No estoy seguro, alguien me contrató de forma anónima para resolver este caso. ¿Puedo ayudar? Profundicemos en este interesante caso de ransomware en WordPress y cómo se resolvió. Descubriremos algunas pistas interesantes y aprenderemos algunos trucos. También valoraremos las contramedidas para evitar esta situación en el futuro.

[← All talks](https://nestorangulo.pro/speaking/)