Hacked WordPress Sites Spread Ransomware, Steal Crypto Wallets

The notable shift here is the delivery channel: compromised WordPress sites turn ordinary browsing into a malware vector, with fake CAPTCHAs tricking users into running PowerShell commands. That targets credentials and wallet seed phrases, meaning the risk extends beyond Windows users to anyone managing crypto assets on an infected machine. The collection of screenshots and data archives suggests the campaign is as much about surveillance and data harvesting as encryption. Whether the accidental self-infection disrupts operations, and how quickly compromised sites are cleaned up, are the open questions worth watching.