Ransomware dubbed CTB-Locker for Websites encrypts WordPress websites in exchange for Bitcoin ransom payments. The malware was first discovered by researchers Benkow Wokned and Tomas Meskauskas, who have warned that the malware at this point has likely infected hundreds of sites. The ransom note goes on to reference a news story that quotes an FBI spokesmans controversial advice that companies hit by ransomware should just pay the ransom. Many of the websites attacked by the malware appear to be running versions of WordPress which are either out-of-date, poorly configured or running plugins with security holes.”]
Source: https://grahamcluley.com/ransomwares-new-target-websites/