Malware campaign has been gaining steam by enrolling a growing number of legitimate but compromised websites. Its modus operandi relies on social engineering users with fake but convincing update notifications. WordPress and Joomla sites that were hacked bear the same kind of injection within their CMS JavaScript files. Squarespace is another popular Content Management System that is also affected by the same campaign. We dont have an exact number of sites that are affected, we surmise that it is in the thousands.”]