Thousands of WordPress sites infected with infostealer malware

The American hosting company GoDaddy has more than six thousand WordPress sites discovers that have been infected with infostealer malware in recent months.

The websites become infected via seemingly harmless plug-ins. In reality, the plugins infect WordPress sites with infostealer malware, a type of malware designed to steal victims’ login credentials.

According to GoDaddy, this is a widespread problem that has already affected tens of thousands of websites.

Since August 2023, the company has detected 25,000 compromised websites, but the actual number is likely much higher.