This is published on the web by wordpress:
Google Blocks Thousands Of WordPress Sites Following Malware Attack
Security firm Sucuri reports that Google has blacklisted over 11,000 malware-infected WordPress domains, and over 100,000 sites in total have been affected by a new malware campaign from SoakSoak.ru.
By using a vulnerability found in the WordPress plugin RevSlider, SoakSoak modifies a file in a site’s WordPress installation and loads Javascript malware.
RevSlider is often used in WordPress themes, so many site owners may not even know they’re using the plugin, let alone that they need to update it to prevent a malware attack. Moreover, it’s not a plugin that’s easily updated, as Sucuri’s Daniel Cid points out:
“The biggest issue is that the RevSlider plugin is a premium plugin, it’s not something everyone can easily upgrade and that in itself becomes a disaster for website owner. Some website owners don’t even know they have it as it’s been packaged and bundled into their themes”
Visitors of infected sites may be redirected to a webpage that will attempt to download malware onto their computers. Google’s decision to block infected sites shortly after the vulnerability became known will hopefully prevent the malware from spreading any further.
If you believe your WordPress site has been infected by the SoakSoak malware, there is a list of resources in this WordPress Support thread that can help you correct the problem.
If you’re in the clear, then let this be a reminder that it’s incredibly important to keep your WordPress plugins updated in order to be fully protected against security vulnerabilities. Updating your plugins is just as important as keeping your WordPress installation updated to the most current version.
It is obvious that internet companies like Google can do anything surreptitious that is or appears profitable, blame it on that mysterious dark web, and no one will know. Ditto for the U. S. Government, whose employees frivolously use the national security argument to justify any sort of tyrannical, unconstitutional practice and silence all opposition. National security requires that marketers track everything about us as we proceed in public, that this information be used or abused according to any purpose. So how will we ever figure out the mystery of why we are finding things that appear that are mathematically impossible if our website is in fact on the Internet?
We think that the U. S. Government has entered into agreements with the internet companies to allow them to do these questionable and monopolistic practices in exchange for help spying on us, you know, to be only used for our security. We trust that government will not abuse this power because Congress oversees the executive branch so closely, and is certainly not intimidated or afraid of any of the ten or twelve open and secret agencies within the executive branch..
It is also mathematically impossible that some lead not have been kept out of the people of Flint if the articles about water and inventions were read, unless of course the American people have become too stupid and slavish to read anything at all.
There are 60 million people using WordPress accounts? Gee, no interest in philosophy and psychology? No one working on the Flint River Crisis? OK, Matt Mellon-wedge, we’re callin’ you out, to defend your integrity. Tell us it ain’t so Matt. Has success corrupted you so soon?