[Nearly 2,000 Hacked WordPress Websites Used to Spread Malware and Deploy Ransomware] Odaily Planet Daily News: Cybersecurity company Check Point Research has discovered that the StopAndProtect ransomware campaign is using nearly 2,000 compromised WordPress websites to distribute malware, steal data, monitor victims, and deploy ransomware. The campaign was identified in mid-May. As of July 24, the campaign had compromised over 6,000 unique IP addresses, including 1,852 in the United States, 630 in Russia, and 630 in India. The hacked websites were also used to host malware, send commands, and store stolen files, screenshots, and activity logs. Attackers tricked Windows users into running PowerShell commands via fake CAPTCHAs, enabling them to steal credentials and cryptocurrency wallet seed phrases, as well as spread through networks and USB devices. Researchers collected over 31,000 screenshots and more than 700 compressed data packages, and they believe the attackers may have accidentally infected themselves. (Decrypt)