Attacks on WordPress Sites Surge

mood · May 5, 2020

A hacker group tried to hijack 900,000 WordPress sites over the last week
Massive hacking operations causes a 30 times spike in bad traffic
May 5, 2020
https://www.zdnet.com/article/a-hac...ck-900000-wordpress-sites-over-the-last-week/

A hacker group has attempted to hijack nearly one million WordPress sites in the last seven days, according to a security alert issued today by cyber-security firm Wordfence.

The company says that since April 28, this particular hacker group has engaged in a hacking campaign of massive proportions that caused a 30x uptick in the volume of attack traffic Wordfence has been tracking.

"While our records show that this threat actor may have sent out a smaller volume of attacks in the past, it's only in the past few days that they've truly ramped up," said Ram Gall, QA engineer at Wordfence.
The attacks peaked on Sunday, May 3, when the group launched more than 20 million exploitation attempts against half a million domains.
Click to expand...

Gall says the group primarily exploited cross-site scripting (XSS) vulnerabilities to plant malicious JavaScript code on websites, to redirect incoming traffic to malicious sites.

Wordfence says the hackers used a broad spectrum of vulnerabilities for their attacks.
However, Wordfence also warns that the threat actor is sophisticated enough to develop new exploits and is likely to pivot to other vulnerabilities in the future.
Click to expand...

Wordfence: Nearly a Million WP Sites Targeted in Large-Scale Attacks

Log in or Sign up

Attacks on WordPress Sites Surge

mood Updates Team

Employee monitoring software surges as companies send staff home

WordPress Releases Security Update April 30, 2020

WordPress, Apache Struts Attract the Most Bug Exploits

WordPress to add auto-update feature for themes and plugins

Active Attacks Target Popular Duplicator WordPress Plugin

Log in or Sign up

Attacks on WordPress Sites Surge

mood Updates Team

Employee monitoring software surges as companies send staff home

WordPress Releases Security Update April 30, 2020

WordPress, Apache Struts Attract the Most Bug Exploits

WordPress to add auto-update feature for themes and plugins

Active Attacks Target Popular Duplicator WordPress Plugin

Useful Searches