Mysterious spike in WordPress hacks silently delivers ransomware to visitors
Found on Ars Technica on Friday, 05 February 2016
It's still not clear how, but a disproportionately large number of websites that run on the WordPress content management system are being hacked to deliver crypto ransomware and other malicious software to unwitting end users.
People running WordPress sites should take time to make sure their servers are fully patched and locked down with a strong password and two-factor authentication.
How? The problem is that they are running Wordpress. It's a big attack vector and home to lots of bugs and holes.