Windows malware performs bruteforce attack on WordPress websites

WordPress is the most widely used Content Management system and that makes it a target for malicious users.These people mainly target outdated WordPress sites because they have more security leaks.

For example, malware that performs brute force attacks was recently discovered by Avast researchers.It also installs a cryptominer that "picks up" various crypto currencies.In addition, copied crypto addresses are replaced with one of their own.

Of course, you don't want this to end up on your hosting.In this blog post, we will go through exactly what you can do to protect yourself against this and how you can recognize the malware.

How do I recognize malware?

Of course, it's also important to know how to recognize malware.The malware has been given the name Clipsa and it spreads via media player codecs, for example Windows media player.
The media player codec has the name 'Ultra XVid Codec Pack.exe' so if this is installed you get infected with malware.Because a cryptominer is also installed on your local PC, it will also become slower. So if you notice that your PC is slower than usual it is recommended to perform a malware scan.

Before it is installed a screen appears which makes it look like it is being installed.After the installation an error message pops up giving users the idea that nothing has been installed, however, here it is installed in the background.

How do I protect myself from malware?

It is important that you know how to prevent malware from entering your hosting.First of all, it is important that you do not download any files from unknown sources. It is also advisable to check the box in your browser that you are always asked where a download should be placed.This makes it easier to keep track of what you are downloading.

It is also useful to install a virus scanner, which blocks malicious websites and downloads.In addition, we always recommend making a backup of your website. If it goes wrong you can restore it.

If you have any further questions, you can always see if one of our chat operators is available.If there is no one on the chat then you can always create a ticket to our helpdesk.