Back to today’s briefing

Story perspectives

20,000 WordPress Sites Targeted by DollyWay Malware Campaign

3/20/2025

49 7

Summary

Story summary

Over 20,000 WordPress sites have fallen victim to the relentless DollyWay v3 malware campaign, which has been wreaking havoc since 2016. By exploiting weak plugins, it redirects unsuspecting visitors to deceitful sites, while its automated reinfection and hidden code make it a nightmare to eradicate. GoDaddy researchers reveal the use of Traffic Direction Systems amplifying these malicious attacks.

1 of 1

Story summary

Over 20,000 WordPress sites have fallen victim to the relentless DollyWay v3 malware campaign, which has been wreaking havoc since 2016. By exploiting weak plugins, it redirects unsuspecting visitors to deceitful sites, while its automated reinfection and hidden code make it a nightmare to eradicate. GoDaddy researchers reveal the use of Traffic Direction Systems amplifying these malicious attacks.