Server Mistake Exposes StopAndProtect’s Hacked WordPress Network
ID: 5bdcb9b8-953d-5ce5-b54b-78fc5c00bd8a
STIX ID: report--5bdcb9b8-953d-5ce5-b54b-78fc5c00bd8a
Feed Name: DataBreaches.Net
Threat Score
Check Point Research uncovered the StopAndProtect operation in which attackers compromised almost 2,000 WordPress sites to host a complete malware toolkit that delivered infostealer and ransomware. Victims were lured by a fake CAPTCHA (ClickFix) prompting a PowerShell command, enabling self-infection, data exfiltration, and remote control.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.