Malware campaign 'DollyWay' breached 20,000 WordPress sites

DollyWay is a long-running (since 2016) malware campaign compromising over 20,000 WordPress sites to stealthily redirect visitors to scam landing pages via a multi-stage JavaScript Traffic Distribution System; it generates roughly 10 million fraudulent impressions per month, persists through auto-reinfection and hidden WPCode/plugin injections, and is monetized through affiliate networks, with GoDaddy publishing related IoCs.