The GootLoader malware family has made a sharp comeback in late 2025 after a quiet spell. In its latest campaign, it’s using clever obfuscation techniques—and WordPress sites—to deliver malicious payloads with record speed.

Your website is under attack right now. Here’s how hackers are getting in—and how to stop them.

A sophisticated multi-layered malware campaign has emerged targeting WordPress e-commerce sites running WooCommerce, threatening the security of over 6 million active online stores globally. First discovered in August 2025, this advanced threat demonstrates unprecedented evasion capabilities, leveraging rogue WordPress plugins with custom encryption, fake image files concealing malicious JavaScript payloads, and persistent backdoor infrastructure that enables attackers to deploy additional code remotely.

A sophisticated new malware campaign is targeting WordPress sites with an ingenious obfuscation technique that’s proving difficult to detect—and it’s already hit over 30,000 sites in a single month.

A sophisticated threat group is exploiting blockchain smart contracts to create nearly undetectable malware distribution systems, compromising thousands of WordPress websites in the process.

A stored cross-site scripting (XSS) flaw in WPBakery Page Builder’s Custom JS feature was disclosed; attackers with low-level authenticated access can persist JavaScript that executes when higher-privilege users view the page. Update WPBakery to the patched version immediately and follow the hardening steps below.