VexTrio Using 20,000 Hacked WordPress Sites in Traffic Redirect Scheme
ID: 120d5574-24c2-5d88-b0d6-04ebfc002096
STIX ID: report--120d5574-24c2-5d88-b0d6-04ebfc002096
Feed Name: Dark Reading
Date Published: 2025-03-20
Date Updated: 2026-04-21
Author: Alexander Culafi, Senior News Writer, Dark Reading
**DollyWay World Domination** is a long-running VexTrio malware campaign that has compromised thousands of WordPress sites by injecting redirect scripts and using a distributed Traffic Direction System to funnel visitors through multi-stage scam or malware/phishing destinations; the campaign employs reinfection mechanisms, cryptographically signed data transfers, removal of competing malware, and monetization via ad networks, and GoDaddy's research includes IoCs and cleanup recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.