Attack wrangles thousands of web users into a password-cracking botnet
Enlarge (credit: Getty Images)
Attackers have transformed hundreds of hacked sites running WordPress software into command-and-control servers that force visitors’ browsers to perform password-cracking attacks.
A web search for the JavaScript that performs the attack showed it was hosted on