Massive Campaign Uses Hacked WordPress Sites as Platform for Black Hat Ad Network

Every so often attackers register a new domain to host their malware. In many cases, these new domains are associated with specific malware campaigns, often related to redirecting legitimate website traffic to third party sites of their choosing — including tech support scams, adult dating, phishing, or drive-by-downloads.

Since late December, our team has been tracking a new spike in WordPress website infections related to the following malicious domain: track[.]violetlovelines[.]com

PublicWWW results show over 4,500 websites impacted by this malware …

ad network adult attackers black hat black hat tactics campaign campaigns cases dating december domain domains downloads drive hacked hacked websites hacked wordpress host infections malware network new domain new domains obfuscation party phishing platform redirects register scams support team tech tech support tech support scams third tracking traffic website website backdoor website malware infections website security wordpress wordpress plugins and themes wordpress security