Hacked WordPress Sites Used as Criminal Infrastructure

The notable detail is not the scale of the compromise but the target: wallet files sitting on ordinary web-facing machines, not exchange infrastructure. That shifts the risk profile toward small operators, developers and self-custodying users who treat a website as separate from their keys. Whether this reflects a broader pattern of attackers favouring low-cost, widely available footholds over high-value targets is the open question worth watching.