WordPress visitors unintentionally part of cyberattack
The NCSC warns that vulnerable WordPress websites are currently being exploited by a botnet. Attackers are placing malicious code on compromised websites, causing visitors to be unknowingly used for cyberattacks on other systems.
The attack operates through the visitors’ browsers: as soon as someone visits an infected website, their device is temporarily used to send unwanted traffic to targets. Consequently, not only website owners but also visitors are victims of the attack.
The NCSC advises WordPress administrators to perform updates immediately, check plugins and themes, and remove suspicious scripts. Furthermore, it is important to implement security measures such as monitoring and strong access control.
For visitors, the risk is limited, but the incident demonstrates that even a normal website visit can contribute to large-scale botnet activities. The warning once again underscores the importance of timely patching and active website management.
Read the NCSC Article for more information.