Thousands of web pages abused by hackers to spread malware

WordPress logo on mobile.

• UNC5142 hacked 14,000+ WordPress sites to distribute malware
• Malware payloads were fetched from blockchain, boosting resilience and hindering takedowns
• ClickFix lures tricked users into running malicious commands

More than 14,000 WordPress websites were hacked and used as launchpads for malware distribution, Google’s Threat Intelligence Group (GTIG) said in a recent report.