Threat Actors Weaponize WordPress Websites To Redirect Visitors To Malicious Websites - Cybernoz - Cybersecurity News

Threat Actors Weaponize WordPress Websites To Redirect Visitors To Malicious Websites - Cybernoz - Cybersecurity News

Cybersecurity researchers have uncovered a sophisticated malware campaign targeting WordPress websites through an ingenious ZIP archive-based attack mechanism. The malware, first reported in July 2025, represents a significant evolution in web-based threats, utilizing advanced obfuscation techniques and stealthy persistence methods to redirect unsuspecting visitors to malicious domains while simultaneously conducting search engine optimization p…

Threat Actors Weaponize WordPress Sites to Redirect Visitors to Malicious Domains

Security researchers identified a sophisticated malware campaign targeting WordPress websites, where threat actors embedded malicious code within core files to facilitate unauthorized redirects and search engine optimization (SEO) poisoning. The infection was traced to the wp-settings.php file, a fundamental component of the WordPress framework, which had been altered to include two anomalous lines of PHP […] The post Threat Actors Weaponize Wor…