Nearly 2,000 hacked WordPress sites turned into criminal infrastructure

A criminal operation called StopAndProtect compromised nearly 2,000 WordPress websites and used them to spread malware, steal crypto wallet files, and deploy ransomware. The hacked sites served as ready-made infrastructure for attacks on users. The scale of the operation points to an organised cybercriminal group.