According to security researchers, over 2,000 WordPress sites have been hacked to fuel a campaign that redirects visitors to scam sites containing unwanted browser notification subscriptions, fake surveys, giveaways, and fake Adobe Flash downloads. Security firm Sucuri detected this hacking campaign last week. Some of the vulnerable plugins seen being exploited are the “CP Contact Form with PayPal” and the “Simple Fields” plugins.
>2000 WordPress sites were found to have malware redirecting visitors to malicious sites either hosting scams or downloading more malware.https://t.co/WtC22rV9sq#wordpress #malware
— Cyber Vigilance UK (@Cyber_Vigilance) January 23, 2020
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.