Hackers are using fake WordPress DDoS pages to launch malware

Hackers are pushing the distribution of dangerous malware via WordPress websites through bogus Cloudflare distributed denial of service (DDoS) protection pages, a new report has found. As reported by PCMag and Bleeping Computer, websites based on the WordPress format are being hacked by threat actors, with NetSupport RAT and a password-stealing trojan (RaccoonStealer) being installed if victims fall for the trick.

A digital depiction of a laptop being hacked by a hacker.Digital Trends Graphic

Cybersecurity firm Sucuri detailed how hackers are breaching WordPress sites that don’t have a strong security foundation in order to implement JavaScript payloads, which in turn showcase fake Cloudflare protection DDoS alerts. Once someone visits one of these compromised sites, it will direct them to physically click a button in order to confirm the DDoS protection check.

That action will lead to the download of a ‘security_install.iso’ file to one’s system. From here, instructions ask the individual to open the infected file that is disguised as a program called DDOS GUARD, in addition to entering a code. Another file, security_install.exe, is present as well — a Windows shortcut that executes a PowerShell command via the debug.txt file.

Once the file is opened, NetSupport RAT, a popular remote access trojan, is loaded onto the system. The scripts that run once they have access to the PC will also install and launch the Raccoon Stealer password-stealing trojan. Originally shut down in March 2022, Raccoon Stealer made a return in June with a range of updates.

Once successfully opened on a victim’s system, Raccoon 2.0 will scan for passwords, cookies, auto-fill data, and credit card details that are stored and saved on web browsers. It can also steal files and take screenshots of the desktop. As highlighted by Bleeping Computer, DDoS protection screens are starting to become the norm.

Their purpose is to protect websites from malicious bots looking to disable their servers by flooding them with traffic. However, it seems hackers have now found a loophole to use such screens as a disguise to spread malware. With this in mind, Sucuri advises WordPress admins to look at its theme files, which is where threat actors are concentrating their efforts.

Furthermore, the security website stresses that ISO files won’t be involved with DDoS protection screens, so be sure to not download anything of the sort. Hacking, malware, and ransomware activity have become increasingly common throughout 2022. For example, a hacking-as-a-service scheme offers the ability to steal user data for just £10.

As ever, make sure you reinforce your passwords and enable two-factor authentication across all your devices and accounts.

Editors’ Recommendations

Tags:

greene-king listed on couponmatrix.ukhoburne listed on couponmatrix.ukjarlo-london listed on couponmatrix.ukquidco listed on couponmatrix.ukthe-gift-experience listed on couponmatrix.uktrampoline-warehouse listed on couponmatrix.uk
greene-king listed on couponmatrix.ukIf you want quality food and drink for affordable prices you will love Greene King. With a heritage of over 200 years and a jaw-dropping 2900 pubs across the UK, Greene King is the quintessential British pub. Bringing a delicious and historic range of beers and fine ales, Greene King breweries are industry leaders in customer experience and original brews. With a Greene King discount code, you can enjoy eating and drinking out for less. Whether you’re with your mates, your family, going on a date, or chilling by yourself, Greene King is the place for you.
hoburne listed on couponmatrix.ukLooking for a holiday the whole family can enjoy? At a Hoburne Holiday Park, there are so many things to see and do, you won't ever want to leave. From Cornwall and Dorset to Hampshire and Gloucestershire, there's a coastal or countryside cabin just waiting to be discovered. Make your next break the most affordable yet with a Hoburne discount code and enjoy the family holiday of a lifetime. With pet-friendly accommodation, you can even bring your furry friend along for the fun!
jarlo-london listed on couponmatrix.ukJarlo is a London-based brand that creates beautiful clothing. Combining elements of nostalgia with contemporary fabrics and intricate detailing to create something unique. We believe that fashion should be fun, and our Jarlo discount code is the perfect way to save on your next order! Whether you're looking for a new dress or a statement piece, we've got you covered. At Groupon, we know that saving money is important to our customers. That's why we work hard to find the best discount codes and deals for Jarlo. We want you to be able to get the most out of your purchase, and our team is constantly on the lookout for ways to help you save. So be sure to check back often for the latest Jarlo discount code to get the best deal possible! Thanks for shopping with us! One of the best-selling products is the Mika Cowl Front Maxi Dress, with strappy back detail, perfect for formal occasions. If you're looking for a discount on Jarlo, then you've come to the right place! We've got a great selection of Jarlo products at amazing prices. And with our Jarlo London discount code, you can save even more! So what are you waiting for? You don't want to miss these offers!
quidco listed on couponmatrix.ukElevate your online shopping thrills with Quidco! Earn massive cashback while spending at top retailers like Argos, eBay, Amazon, Currys, Boots and more. Signing up is free, and you could pocket up to an average of £300 in cashback yearly. Add an extra layer of excitement with our exclusive Quidco discount code, earning up to 16.5% cashback on your planned purchases. You could get money back on fabulous finds like clothing, laptops, bedding and beyond. Don’t just shop – pocket some cashback with Quidco!
the-gift-experience listed on couponmatrix.ukThe Gift Experience first started trading in 2003. Giving the gift of an experience is really all the rage right now and so its no small wonder that this family-run enterprise quickly expanded from selling gifts and cards to gift experiences on a much larger scale. If you find that you're a bit stuck thinking up present ideas for friends, family and colleagues, The Gift Experience can help you find the ideal present and with your gift experience discount code to hand, there's no excuse for not flashing the cash and being generous.
trampoline-warehouse listed on couponmatrix.ukOur Trampoline Warehouse discount codes allow you to bounce to some hefty savings. Jumpers of all abilities can pick up professional trampolines, parts and accessories, ready to practise tuck jumps, twists and somersaults. So, whether you’re after something to keep kids entertained in the garden, or just wanting to get some exercise in, hop to it with our Trampoline Warehouse coupon codes. Trampoline Warehouse specialise in supplying customers with all the suitable equipment. Safety is at the forefront of their business, so all trampolines are fitted with full safety enclosures and padding – ready in case you take a tumble. Trampolines can be viewed by brands or size – from 6ft up to a hefty 16ft – while rectangular packages are also available. Tents to fit over trampolines can also be purchased for added protection, while each tent comes with a cover, ladder and spring tensioning tools. And if you’re just looking for some snazzy accessories for your trampoline, Trampoline Warehouse has got that sorted too, from shoe bags to safety net enclosures and anchor kits. Ready to swap your boring exercise regime for a bounce on a trampoline? Unleash your inner kid and spring to it with our Trampoline Warehouse discount codes.