StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

Cybersecurity researchers have identified a large-scale cybercrime operation that utilizes nearly 2,000 compromised WordPress sites to spread malware and steal sensitive information. The operation leverages these hacked websites as infrastructure to disseminate malware and commandeer infected hosts. Stolen data includes documents, screenshots, and activity logs, which are used to track the status of the operation. The operation does not rely on a single malware variant, but rather a collection of different malicious software tools. This toolkit of criminal software enables the operation to carry out its malicious activities. The scope of the operation is global, affecting a significant number of websites.