.jpg)
Once again, so cheap, so easy but so insecure. Don't be fooled by its charms at first sight.
With more than 70 million pages using its technology, WordPress is one of the most widely used blogging platforms in the world, making it a daily target for multiple cyberattacks.
The latest, and one of the most powerful in recent months, is known as SoakSoak, which has already managed to affect more than 100,000 pages worldwide, of which Google has already blocked more than 11,000.
This new malware, first detected last Sunday, was created by the Russian site SoakSoak.ru, and causes the modification of the wp-includes/template-loader.php file, causing the wp-includes/js/swobject.js file to load on all pages of the website. This causes affected pages to start behaving strangely, redirecting their readers to the aforementioned Russian website.
According to security website Sucuri.net, the culprit behind this malware infection is RevSlider, a premium plugin present in numerous WordPress themes that has a vulnerability through which blogs receive a malware loading code without the owners realizing it.
The so-called SoakSoak loads without blog owners noticing, so they only detect it when they are already infected and their page redirects their readers. For now, aside from blog redirects, the only way to check if our page is infected is by using Sucuri's own online web analysis tool.
Initial recommendations suggested that to get rid of the malware, it was enough to replace the swfobject.js and template-loader.php files. But although this method effectively ends the infection, it does not fix the entry points through which the blog was infected in the first place, so it won't be long before it gets infected again.
In the past, there have been episodes of blogs hacked with inappropriate news, publishing pages with erotic and unpleasant themes.
If you don't want to tarnish your business's reputation... really... don't use Wordpress!
