# Over 6,000 WordPress Sites Hacked to Install Malware Plugins! ⚠️

**URL:** <https://onehack.st/t/over-6-000-wordpress-sites-hacked-to-install-malware-plugins/294218>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [October 22, 2024, 11:51am UTC](https://onehack.st/t/over-6-000-wordpress-sites-hacked-to-install-malware-plugins/294218 "2024-10-22T11:51:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [October 22, 2024, 11:51am UTC](https://onehack.st/t/over-6-000-wordpress-sites-hacked-to-install-malware-plugins/294218/1 "2024-10-22T11:51:14Z")

</div>

**Summary:**

1. **Hacking Campaign Overview**  
Over **6,000 WordPress sites** have been compromised by hackers using malicious plugins that push information-stealing malware through fake software updates.

2. **ClearFake and ClickFix**  
Two campaigns, **ClearFake** and **ClickFix** , have been identified. ClearFake displays fake browser update banners, while ClickFix shows error messages claiming to offer fixes that actually download malware.

3. **Use of Malicious Plugins**  
The hackers install seemingly legitimate plugins that imitate popular tools like **Wordfense Security**. These plugins contain scripts that display fake alerts to users, tricking them into executing harmful commands.

4. **Automated Installations**  
Investigations reveal that the attackers use **stolen admin credentials** to access WordPress sites and automate the installation of these malicious plugins.

5. **Continued Threats**  
Security experts urge WordPress administrators to enhance their security practices to prevent such breaches and ensure their websites are protected against these ongoing threats.

**Read more at:** [BleepingComputer](https://www.bleepingcomputer.com/news/security/over-6-000-wordpress-hacked-to-install-plugins-pushing-infostealers/)

---

<div class="post-metadata">

**Author:** ![Bob.Smit](https://onehack.st/user_avatar/onehack.st/bob.smit/32/161700_2.png) [@Bob.Smit](https://onehack.st/u/Bob.Smit)\
**Post date:** [October 22, 2024, 7:13pm UTC](https://onehack.st/t/over-6-000-wordpress-sites-hacked-to-install-malware-plugins/294218/2 "2024-10-22T19:13:23Z")

</div>

🤣 keep believing everything is safe..wordpress is very “easy” to set up, here are 6000 site “admins” that may disagree with you, good find Joker