Get All Access for $5/mo

More Than 100,000 WordPress Websites Reportedly Infected by Russian Malware Google has already flagged 11,000 malicious domains -- though it is likely that many more than that have been compromised by a mysterious virus called 'SoakSoak.'

By Geoff Weiss

Opinions expressed by Entrepreneur contributors are their own.

Updated on July 17 at 1:55 p.m. with comments from a WordPress spokesperson.

Over 100,000 WordPress sites have been infected by a Russian virus called SoakSoak, which loads an attack code onto webpages created through the uber-popular blogging platform, according to a report by Ars Technica.

Google has already flagged roughly 11,000 malicious domains -- though it is likely that many more than that have been compromised.

According to Gizmodo, more than 70 million total sites use WordPress as a content-management system -- from personal blogs to Time.com. However, only self-hosted sites that use WordPress have been affected by the malware -- meaning personal blogs are okay.

The aim of the hackers and the consequences of the virus -- whether to steal data or otherwise -- remain unclear.

Related: 5 Lessons Leaders Can Learn From the Sony Hacking Scandal

The malware infiltrated WordPress through a vulnerability in a slideshow plug-in called Slider Revolution. While Slider Revolution has since fixed the bug with updates -- it knew about the vulnerability earlier this fall, according to Gizmodo -- the older version of the plug-in is still bundled with many WordPress themes.

"The biggest issue is that the RevSlider plugin is a premium plugin," wrote Sucuri, an online security firm that was first to identify the infection. "It's not something everyone can easily upgrade and that in itself becomes a disaster for website owners."

Ars Technica notes that Sucuri also offers a free scanner here, which can determine which sites are actively compromised.

A WordPress spokesperson could neither confirm that 100,000 sites had been infected, nor that 70 million sites use the platform as a CMS.

"Automattic [WordPress.com's parent company] is taking action to protect sites from the vulnerability," the company said in a statement. "VaultPress, a backup and security product, has included protection from this vulnerability since it was first announced back in September."

Related: Get This: Sony Hack Reveals Company Stored Passwords in Folder Labeled 'Password'

Geoff Weiss

Former Staff Writer

Geoff Weiss is a former staff writer at Entrepreneur.com.

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Growing a Business

This Cozy Coffee and Garden Shop Has Become a Staple in Its Community By Following 5 Smart Strategies

Maypop is a combination coffee and garden shop where a blend of community building and customer service creates an unforgettable experience.

Business News

OpenAI Just Released Its Text-to-Video Generator, Sora. Here's How the New AI Could Impact Small Businesses and Creators.

Sora has a variety of use cases for businesses, from social media campaigns to video creation.

Franchise

McDonald's Announces the Return of the Snack Wrap in 2025 — Here's What to Expect From Its Comeback

The decision comes after years of persistent customer demand for the portable snack, which debuted nearly two decades ago.

Business News

Who Is Luigi Mangione? UnitedHealthcare CEO Brian Thompson Murder Suspect Arrested in Pennsylvania on Firearms Charge

Mangione, 26, has not been charged in connection with the killing of Thompson.

Innovation

These Entrepreneurs Created a League That Turns Gamers Into Pro Race Car Drivers: 'We're Giving Drivers a Sustainable Career Path'

Racing Prodigy's innovative E2Real sports league is lowering the high-cost barrier to entry for drivers to take their passion to the track.

Business News

'Faster, Smarter, and More Relevant': Reddit Tests AI That Combs the Site For You

The AI is like a blend of Google and ChatGPT, tailored specifically for Reddit.