Hackers Using WordPress and Joomla Sites to Distribute Shade Ransomware

From gbhackers.com

CMS based sites such as WordPress and Joomla are the popular targets for cybercriminals, they hijack those sites and inject malicious contents.

ThreatLabZ researchers detected a campaign that targets WordPress and Joomla sites to distribute Shade/Troldesh ransomware, backdoors, redirectors, and a variety of phishing pages.

Hackers use to hijack several hundreds of CMS sites and inject the Troldesh ransomware and phishing pages. All the compromised websites using WordPress versions between 4.8.9 to 5.1.1 and they SSL issued through Automatic Certificate Management Environment such as Let’s Encrypt, Cpanel and others.

Read more…