Experts warn 2,000 hacked WordPress sites were secretly running a global crime ring
Compromised WordPress sites have been used by a global operation, using trusted websites to deliver malware, instruct infected devices, and even store stolen documents.
A vast cybercrime ring was operating through infected WordPress websites, according to researchers from Check Point Security. The investigation, dubbed "StopAndProtect," discovered around 2,000 WordPress domains were hijacked and part of a larger network of 5,000 compromised computers worldwide. WordPress powers around 43% of websites globally, making it the most prevalent content management system (CMS).
The researchers found the cybercrime ring had made errors, such as leaving behind screenshots, logs, and internal tools that revealed the operation. Despite the security concerns, WordPress remains a popular choice for single-page websites, blogs, news sites, and online stores, as well as for small businesses. To avoid becoming part of a similar cybercrime ring, users are advised to keep their WordPress sites updated, use recent versions, and ensure plugins are fully updated.
Regular updates and using a secure web host that monitors for intrusions can help prevent sites from being compromised.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
