Security firm Sucuri analyzed tens of thousands of compromised websitesSecurity Affairs·Sep 26, 06:00 UTC · Sep 26, 2016Malware42
Abandoned Eval PHP WordPress plugin abused to backdoor sitesSecurity Affairs·Apr 22, 21:26 UTC · Apr 22, 2023Malware42
Crooks injects e-skimmers in random WordPress plugins of eSecurity Affairs·Dec 9, 14:46 UTC · Dec 9, 2021Vulnerability42
Fake UpdraftPlus WordPress Plugins used to backdoor sitesSecurity Affairs·Oct 20, 19:28 UTC · Oct 20, 2019Malware42
Crooks are abusing Google Search ConsoleSecurity Affairs·Sep 15, 06:05 UTC · Sep 15, 2015Vulnerability42
+17K WordPress websites infected with the Balada InjectorSecurity Affairs·Oct 13, 05:22 UTC · Oct 13, 2023VulnerabilityCVE-2023-316947
Unveiling the Balada injector: a malware epidemic in WordPressSecurity Affairs·Jun 14, 11:13 UTC · Jun 14, 2023Malware42
Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress SitesThe Hacker News·Apr 28, 03:19 UTC · Apr 28, 2023Malware42
AdSense fraud campaign relies on 10,890 sites that were infected since September 2022Security Affairs·Feb 15, 07:27 UTC · Feb 15, 2023Threat actor57
DDoS Protection Weaponized to Deliver RATsInfosecurity Magazine·Aug 22, 10:50 UTC · Aug 22, 2022Ransomware57
Crooks spreads backdoor devised as a security WordPress PluginSecurity Affairs·Oct 1, 13:10 UTC · Oct 1, 2017Malware42
Hackers Exploit Google Tag Manager to Deploy Credit Card Skimmers on Magento StoresThe Hacker News·Feb 11, 03:53 UTC · Feb 11, 2025Vulnerability42
Balada Injector continues to infect thousands of WordPress sitesSecurity Affairs·Jan 15, 10:11 UTC · Jan 15, 2024VulnerabilityCVE-2023-600047
Massive AdSense Fraud Campaign UncoveredThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2023Threat actor57
Researchers Uncover Malware Controlling Thousands of Sites in Parrot TDS NetworkThe Hacker News·Jun 3, 13:43 UTC · Jun 3, 2022Malware42
Tens of AccessPress WordPress themes compromised as part of a supply chain attackSecurity Affairs·Jan 24, 20:33 UTC · Jan 24, 2022VulnerabilityCVE-2021-2486747
Experts observed a new wave of wp-vcd malware attacks targeting WordPress sitesSecurity Affairs·Nov 20, 14:53 UTC · Nov 20, 2017Malware42
Sneaky Credit Card Skimmer Disguised as Harmless Facebook TrackerThe Hacker News·Apr 12, 09:26 UTC · Apr 12, 2024Malware42
Hackers exploited WordPress Popup Builder plugin flaw to compromise 3,300 sitesSecurity Affairs·Mar 11, 07:55 UTC · Mar 11, 2024VulnerabilityCVE-2023-600047
Balada Injector Infects Over 7,100 WordPress Sites Using Plugin VulnerabilityThe Hacker News·Jan 22, 01:32 UTC · Jan 22, 2024VulnerabilityCVE-2023-600047
Surging CMS attacks keep SQL injections on the radar during the next normalHelp Net Security·Nov 14, 09:12 UTC · Nov 14, 2023Vulnerability42
Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023The Hacker News·Oct 12, 08:26 UTC · Oct 12, 2023VulnerabilityCVE-2023-316947
Hundreds of WordPress sites defaced in fake ransomware attacksThe Record·Dec 19, 00:00 UTC · Dec 19, 2022Ransomware57
Fake DDoS protection pages are delivering malware!Help Net Security·Sep 21, 07:53 UTC · Sep 21, 2022Malware42
CMS-based sites under attack: The latest threats and trendsHelp Net Security·May 3, 00:00 UTC · May 3, 2022Vulnerability42
Magecart hackers hide stolen credit card data into images and CSS filesSecurity Affairs·Jul 12, 07:15 UTC · Jul 12, 2021Malware42
CoinHive URL Shortener Abused to Secretly Mine Cryptocurrency Using Hacked SitesThe Hacker News·Jul 4, 08:25 UTC · Jul 4, 2018Malware42
Thousands of WordPress sites hacked due a flaw in RevSliderSecurity Affairs·Feb 7, 13:07 UTC · Feb 7, 2018Ransomware57
Fraudulent gambling network may actually be something more nefariousArs Technica · Security·Dec 3, 17:23 UTC · Dec 3, 2025Phishing & fraud42
Detour Dog Caught Running DNS-Powered Malware Factory for Strela StealerThe Hacker News·Oct 4, 14:36 UTC · Oct 4, 2025Malware42
Hackers Deploy Stealth Backdoor in WordPress MuThe Hacker News·Jul 24, 05:11 UTC · Jul 24, 2025Malware42
Shell No! Adversary Web Shell Trends and Mitigations (Part 1)Recorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability42
Fake Security Plugin on WordPress Enables Remote Admin Access for AttackersThe Hacker News·May 2, 05:57 UTC · May 2, 2025Data breach57
Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment SkimmersThe Hacker News·Feb 18, 05:26 UTC · Feb 18, 2025Malware42
WordPress Mandates Two-Factor Authentication for Plugin and Theme DevelopersThe Hacker News·Sep 12, 04:57 UTC · Sep 12, 2024Vulnerability42
Hackers Exploit Legitimate Websites to Deliver BadSpace Windows BackdoorThe Hacker News·Jun 17, 06:28 UTC · Jun 17, 2024Malware42
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ SitesThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2024MalwareCVE-2023-6000CVE-2024-2123CVE-2024-1071+1 CVEs47
DJVU Ransomware's Latest Variant 'Xaro' Disguised as Cracked SoftwareThe Hacker News·Nov 30, 05:04 UTC · Nov 30, 2023Ransomware157