Home / Technology / WordPress Under Fire: Cybercrime Ring Hijacks 2,000 Sites
WordPress Under Fire: Cybercrime Ring Hijacks 2,000 Sites
22 Aug
Summary
- A global cybercrime ring exploited outdated WordPress versions.
- The StopAndProtect investigation uncovered 5,000 infected computers.
- Around 2,000 WordPress sites were commandeered by the criminals.
Researchers have uncovered a sprawling global cybercrime operation that exploited thousands of outdated WordPress websites, turning them into criminal infrastructure. The investigation, named "StopAndProtect," identified a network of 5,000 infected computers and successfully hijacked around 2,000 WordPress domains. This operation leveraged vulnerabilities in both the core WordPress software and its third-party plugins, demonstrating how poorly maintained sites can become tools for malware distribution and data theft.
The StopAndProtect ring distributed various malicious payloads, including ransomware, underscoring the security risks associated with unpatched content management systems. Eli Smadja, from Check Point Research, highlighted that attackers can transform vulnerable WordPress sites into distributed criminal networks for surveillance and data theft.
Given WordPress's dominance, powering nearly half of all websites, this incident raises serious questions about its security. Experts advise users to maintain updated software, be wary of unusual website instructions, and immediately disconnect from suspicious sites. Ensuring WordPress and its plugins are consistently updated is crucial to prevent hijacking and maintain website integrity.
