<story><title>How botnets are created with hijacked Worpess, fake Flash downloads and Node.js</title><url>http://betamode.de/2015/11/23/what-happens-if-your-wordpress-is-hacked/</url></story><parent_chain></parent_chain><comment><author>joshfraser</author><text>I have a Wordpress plugin with ~100k active installs.  Recently I&amp;#x27;ve started getting emails from people wanting to buy the plugin from me.  I&amp;#x27;m assuming they want it for a botnet or other nefarious purposes.  I&amp;#x27;m not sure if Wordpress have stepped up their monitoring of plugins or not, but in past there was little oversight of the plugins and adding a direct backdoor to those 100k servers would be trivial, not to mention the millions of people that could be reached via JavaScript injection.</text></comment>
<story><title>How botnets are created with hijacked Worpess, fake Flash downloads and Node.js</title><url>http://betamode.de/2015/11/23/what-happens-if-your-wordpress-is-hacked/</url></story><parent_chain></parent_chain><comment><author>eljamon</author><text>tl;dr &lt;i&gt;Someone hacks WordPress websites and includes strange .js files that a) lead to fake Flash downloads that install a botnet on your PC and b) abuse your browser to get URLs from a Google search.&lt;/i&gt;</text></comment>