Fake DDoS protection pages on compromised WordPress sites lead to malware infections

Threat actors compromise WordPress sites to display fake Cloudflare DDoS protection pages to distribute malware. DDoS Protection pages are associated with browser checks performed by WAF/CDN services which verify if the site visitor is a human or a bot. Recently security experts from Sucuri, spotted JavaScript injections targeting WordPress sites to display fake DDoS Protection pages […]

The post Fake DDoS protection pages on compromised WordPress sites lead to malware infections appeared first on Security Affairs.

breaking news compromised compromised wordpress sites cybercrime ddos ddos protection fake hacking hacking news infections information security news it information security malware pierluigi paganini protection wordpress