Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

guest · Nov 14, 2022

By Ravie Lakshmanan - November 14, 2022

A new malicious campaign has compromised over 15,000 WordPress websites in an attempt to redirect visitors to bogus Q&A portals.

"These malicious redirects appear to be designed to increase the authority of the attacker's sites for search engines," Sucuri researcher Ben Martin said in a report published last week, calling it a "clever black hat SEO trick."
The search engine poisoning technique is designed to promote a "handful of fake low quality Q&A sites" that share similar website-building templates and are operated by the same threat actor.
Click to expand...

A notable aspect of the campaign is the ability of the hackers to modify over 100 files on average per website, an approach that contrasts dramatically from other attacks of this kind wherein only a limited number of files are tampered with to reduce footprint and escape detection.

The ultimate goal of the campaign is to "drive more traffic to their fake sites" and "boost the sites' authority using fake search result clicks to make Google rank them better so that they get more real organic search traffic."
Click to expand...

It's not immediately clear how the WordPress sites are breached, and Sucuri said it did not notice any obvious plugin flaws being exploited to carry out the campaign.
Click to expand...

Sucuri: Massive ois[.]is Black Hat Redirect Malware Campaign

Since September 2022, our research team has tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is.

In this post, we’ll be analysing what this infection does, how the malicious redirects work, and how to mitigate risk and clean up the malware.
Click to expand...

xxJackxx · Nov 14, 2022

Despite all of this people still use Wordpress...
Wordpress Wordpress : List of security vulnerabilities (cvedetails.com)

Log in or Sign up

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

guest Guest

xxJackxx Registered Member

Log in or Sign up

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

guest Guest

xxJackxx Registered Member

Useful Searches