Thousands of WP, Joomla and SquareSpace sites serving malicious updates

Thousands of WP, Joomla and SquareSpace sites serving malicious updates

---

1. CMS Users need to update / Check for signs of comprimised user accounts
2. Review security and authentication procedures
3. Keep up to date with relevant threats

Thousands of compromised WordPress, Joomla and SquareSpace-based sites are actively pushing malware disguised as Firefox, Chrome and Flash Player updates onto visitors.

Website owners and administrators that use those CMSes woud do well to check whether their sites have been compromised and to clean them if they have, then update the CMS and any plugins they use to their latest versions – and keep them regularly updated. Also, they should review their authentication procedure and do what they can to make it more resilient to compromise (e.g., not use passwords that are easy to guess or brute-force).

---

Source: https://www.helpnetsecurity.com/2018/04/13/wp-joomla-squarespace-malicious-updates/