Attackers hijack thousands of WordPress websites to infect visitors

Attackers hijack thousands of WordPress websites to infect visitors

Security company Sucuri reported that attackers are hijacking thousands of WordPress websites to infect unsuspecting visitors. The attack started 15 days ago, but within 48 hours of this week, the number of websites attacked by attackers soared from 1000 to 6000. The hijacked website is used to redirect users to a server hosting attack code. The server tries to use different vulnerability exploitation methods to infect the visitor's computer. Security researchers suspect that attackers have intruded into the website by exploiting the vulnerabilities of some WordPress plug-ins. Sucuri named the attack as VisitorTracker because the function name used by a malicious javascript file is visitorTracker_isMob (). It provided a scan tool to the website administrator to check whether the attack was intruded.

This article permanently updates the link address: