A large number of business websites have been compromised by the SoakSoak gang to deliver ransomware. The list of compromised sites is long and includes the tourism website for Guatemala and the do-it-yourself project site of Dunlop Adhesives. The hackers compromised the websites by exploiting vulnerabilities in WordPress plugins or unpatched content management systems. Once victims files are encrypted by the ransomware, it demands a $500 ransom to get back them. In December 2015, Google blacklisted over 11,000 domains that were infected with this malware.”]
Source: http://securityaffairs.co/wordpress/49558/cyber-crime/soaksoak-campaign.html