Nearly 2,000 WordPress Sites Hacked to Steal Crypto Wallets and Deploy Ransomware

August 21 news, according to Decrypt, cybersecurity firm Check Point Research discovered that hackers breached nearly 2,000 websites built on WordPress, using them to distribute malware, steal cryptocurrency wallet files, and deploy ransomware. The malicious operation, named StopAndProtect, was first detected in mid-May. Hackers lured Windows users via fake CAPTCHAs on compromised sites to run PowerShell commands, installing malware capable of stealing credentials and crypto wallet seed phrases, spreading through networks and USB drives, locking screens, and deploying ransomware.