CYBERSECURITYTRACKER
TRACKING
Permanent story citation

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4697

As cited

Copy frozen at (site build).

threat intel

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

Researchers identified a cybercrime operation called StopAndProtect that exploits approximately 2,000 compromised WordPress websites to distribute malware and exfiltrate data. The operation uses infected hosts to store stolen documents, screenshots, and logs while deploying a toolkit of multiple malware variants rather than relying on a single tool.

Why it matters: WordPress site owners and administrators need to audit their installations for compromise, as thousands of legitimate websites are being weaponized as malware distribution and data theft infrastructure that directly impacts their users and reputation.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

Researchers identified a cybercrime operation called StopAndProtect that exploits approximately 2,000 compromised WordPress websites to distribute malware and exfiltrate data. The operation uses infected hosts to store stolen documents, screenshots, and logs while deploying a toolkit of multiple malware variants rather than relying on a single tool.

Why it matters: WordPress site owners and administrators need to audit their installations for compromise, as thousands of legitimate websites are being weaponized as malware distribution and data theft infrastructure that directly impacts their users and reputation.

VendorsCheck PointWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary