StopAndProtect

StopAndProtect Campaign Exploits Nearly 2,000 Hacked WordPress Sites for Malware Distribution and Data Theft

Researchers have identified a cybercrime operation designated StopAndProtect that abuses approximately 2,000 compromised WordPress websites. The infrastructure is used to distribute malware, store stolen documents and screenshots, and maintain activity logs to track the status of criminal activity. The operation employs a toolkit of criminal software rather than a single malware strain. The full extent of victim impact and the exact number of compromised sites remain unverified.