Websense has detected a new wave of mass-injections of a well-known rogue antivirus campaign. More than 200,000 web pages have been compromised, amounting to around 30,000 unique websites. The injection hijacks visitors to the compromised sites and redirects them to rogue AV sites that attempt to trick them into downloading and installing a Trojan onto their computer. Websense said the rogue AV site appears to perform a scan on the computer and scares the user by displaying fake malware detections of various kinds of Trojans.”]
Source: https://www.csoonline.com/article/2131169/fake-av-attack-targets-wordpress-users.html