Hackers Hijack Over 10,000 WordPress Sites to Distribute Windows and Mac Malware via Fake Browser Update Pages

A cybersecurity firm has reported that hackers are actively hijacking over 10,000 WordPress sites to distribute malware targeting both Windows and macOS users. The ongoing campaign, described as 'spray and pray,' involves the use of fake browser update pages to spread malicious software. As of January 30, 2025, the attack remains live, affecting thousands of websites. The firm monitoring the situation, csideai, emphasizes the exploitation of outdated WordPress sites as a primary vector for this attack. The scale of the breach highlights significant vulnerabilities within the WordPress ecosystem.