tech 🚨 Hackers weaponize WordPress sites for malware
A new malware operation named StopAndProtect is turning thousands of hacked WordPress sites into criminal C2 infrastructure. The attack targets over 6,000 unique victim IP addresses globally, with high infections seen in the US, Russia, and India. Attackers manage nearly 2,000 compromised domains to distribute payloads and steal data. The initial hack uses fake CAPTCHA lures injected into vulnerable WordPress pages. Website admins must urgently update their CMS and plugins to prevent these advanced threats. 💻