StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
A global cybercrime operation that leverages thousands of compromised WordPress websites as infrastructure to spread malware, takeover compromised servers, store stolen data, screenshots, and activity logs made to monitor the activity's progress has been identified by cybersecurity researchers.
According to Jaromła Hořejý of Check Point Research, the operation relies on a whole toolkit of malicious software working together rather than a single piece of malware. Some components encrypt files, others steal documents or lock the screen silently, and still others serve as a live chat between the attackers and their victims.
After finding a ransomware family of the same name in mid-May 2026, the cybersecurity firm is monitoring the massive campaign under the name StopAndProtect. A Click...