Security News > 2022 > August > Fake DDoS protection pages are delivering malware!

Malware peddlers are exploiting users' familiarity with and inherent trust in DDoS protection pages to make them download and run malware on their computer, Sucuri researchers have warned.

DDoS protection pages have become so common that users rarely think twice about doing what those pages tell them to do to get website access.

This state of affairs is being eploited by clever malware peddlers.

Visitors to WordPress sites that have been hacked and injected with specially crafted JavaScript are faced with the fake "Cloudflare DDoS protection" page, which tells them to download the security install.

Once they do that, they are instructed to run it and enter the "Personal verification code" they receive from it into the fake page.

Users are advised to regularly update their operating system and software, to refrain from downloading and opening "Strange" files, and to look into using a script blocking browser extension.

News URL

https://www.helpnetsecurity.com/2022/08/22/fake-ddos-protection-malware/