News on Medial

Attack wrangles thousands of web users into a password-cracking botnet

Arstechnica · 1y

Attackers are using hacked WordPress sites to launch password-cracking attacks by modifying JavaScript on the infected sites. Users visiting these sites unknowingly participate in the distributed attack by attempting to log in to other third-party WordPress sites, using a list of common passwords. The attacks exploit compromised websites to brute force passwords of other potential victim sites, compromising their credentials and gaining unauthorized access. Users can protect themselves by using browser extensions like NoScript or ad blockers that restrict JavaScript execution.