Compromised WordPress Sites Deliver ClickFix Attacks in Global Infostealer Campaign (infosecurity-magazine.com)

• Over 250 legitimate websites compromised
• ClickFix attack uses fake browser update prompts
• Delivers infostealer malware
• Includes news outlets and a US Senate candidate's site
• Rapid7 researchers issued a public warning

"Over 250 legitimate websites, including news outlets and a US Senate candidate’s official webpage, have been compromised to infect visitors with infostealers, warn Rapid7 researchers."