30,000 WordPress sites compromised in new wave of attacks

A new wave of attacks on websites running the WordPress content management system has led to 30,000 sites being hijacked by a cybercriminal gang. According to NetworkWorld, the hijacked websites contain pages that redirect users to drive-by attack sites. Researchers at Websense detailed the findings in a blog post. Researchers from security firm Sucuri found that […]

Andrew Sadauskas 08 March, 2012

A new wave of attacks on websites running the WordPress content management system has led to 30,000 sites being hijacked by a cybercriminal gang.

According to NetworkWorld, the hijacked websites contain pages that redirect users to drive-by attack sites.

Researchers at Websense detailed the findings in a blog post.

Researchers from security firm Sucuri found that a rogue plug-in named ToolsPack (which is known to contain a backdoor used by attackers) was installed on many of the compromised sites, while others used weak passwords or were running outdated versions of WordPress.

Users running WordPress are strongly advised to use strong passwords, update to the latest version of WordPress, and to be wary of the plug-ins they install.