'SoakSoak' Malware Compromises 100,000 WordPress Websites

  • 15 December 2014
  • 1 reply
  • 713 views

Userlevel 7
Badge +54
Sunday, December 14, 2014 Swati Khandelwal
 
  
http://1.bp.blogspot.com/-CsHlNYVM7MU/VI67seP6vJI/AAAAAAAAhNU/pf0o2ROfCfc/s728/SoakSoak-Wordpress-Malware.pngThe users of WordPress, a free and open source blogging tool as well as content management system (CMS), are being informed of a widespread malware attack campaign that has already compromised more than 100,000 websites worldwide and still counting. The news broke throughout the WordPress community earlier Sunday morning when Google blacklisted over 11,000 domains due to the latest malware campaign, that has been brought by SoakSoak.ru, thus being dubbed the ‘SoakSoak Malware’ epidemic. While there are more than 70 million websites on the Internet currently running WordPress, so this malware campaign could be a great threat to those running their websites on WordPress. Full Article 

1 reply

Userlevel 7
Badge +54
by Chris Brook    December 15, 2014

Google blacklisted more than 10,000 different websites over the weekend that it spotted doling out SoakSoak malware, but experts claim the number of impacted sites may ultimately be ten times that figure.

Up to 100,000 sites hosted on WordPress may be vulnerable to a campaign known as SoakSoak, according to web security firm Sucuri, which warned about the malware in a blog post yesterday.

Daniel Cid, Sucuri’s CTO and founder, told Threatpost Monday morning that he’s seen the campaign targeting WordPress users running Internet Explorer on Windows and that it’s pushing multiple exploit kits to the browser.
 
Full Article

Reply