Malware campaign 'DollyWay' breached 20,000 WordPress sites

Malware campaign 'DollyWay' breached 20,000 WordPress sites

A malware operation dubbed 'DollyWay' has been underway since 2016, compromising over 20,000 WordPress sites globally to redirect users to malicious sites.

How To Fix ‘The Site Ahead Contains Malware’ Error On WordPress Site?

The warning “the Site Ahead Contains Malware” means your site is hacked. Follow our guide to remove the hack and the warning.

Cybersecurity researchers have warned evidence linking several 'malware' campaigns into a single persistent operation called DollyWay World Domination, targeting visitors to WordPress sites and which has been active since 2016.

Massive "DollyWay" Malware Attack Compromises 20,000+ WordPress Sites Worldwide

A significant malware operation, dubbed “DollyWay,” has been uncovered by GoDaddy Security researchers, revealing a sophisticated campaign that has compromised over 20,000 WordPress sites globally. This operation, which began in 2016, leverages a distributed network of compromised WordPress sites as Traffic Direction System (TDS) and Command and Control (C2) nodes. The malware’s latest iteration, DollyWay […] The post Massive “DollyWay” Malware …

A massive cyberattack has been targeting WordPress sites since 2016. More than 20,000 sites have been compromised by DollyWay, a virus deployed by a sophisticated cybercriminal gang. The malware exploits known security vulnerabilities in certain WordPress plugins and themes to achieve its goals.

Massive 'DollyWay' Malware Operation Exploits Over 20,000 WordPress Sites Since 2016 - The iBulletin

A long-running cybercriminal operation dubbed “DollyWay” has been actively compromising WordPress websites for nearly a decade. With over 20,000 sites infected worldwide, the malware redirects users to scam pages while continuously evolving its tactics to stay undetected. Eight Years of Stealthy Infections Security researchers at GoDaddy have been tracking DollyWay, revealing its evolution from distributing banking trojans and ransomware to runn…