Cyber crooks are using hacked websites to fool visitors into downloading trojan malware that can take over their PCs.
The hacking campaign has two variations, according to tech security company Zscaler, which has been tracking it. In the first version, the crooks hack into insecure WordPress sites using the theme plugin vulnerability and inject malicious redirect scripts into the compromised site. This allows them to display a fake Flash Player update alert to the user over the compromised site, which aims to trick website visitors into starting a software update.
Source: This fake software update tries to download malware onto your PC even when you click ‘later’ | ZDNet
