Thousands of WordPress Sites Compromised to Distribute Malware
More than 200,000 infected pages redirect visitors to Web sites pushing fake anti-virus software.
Websense researchers are warning that almost 30,000 WordPress sites have been infected in order to distribute rogue anti-virus software.
"The attacks have resulted in over 200,000 infected pages that redirect users to websites displaying fake antivirus scans," writes ITworld's Lucian Constantin. "The latest compromises are part of a rogue antivirus distribution campaign that has been going on for months, the Websense researchers said."
"Many of the blogs compromised in these recent attacks were running outdated WordPress versions, had vulnerable plug-ins installed or had weak administrative passwords susceptible to brute force attacks, said David Dede, a security researcher with website integrity monitoring firm Sucuri Security," Constantin writes.
Go to "30,000 WordPress blogs infected to distribute rogue antivirus software" to read the details.
For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.