Hackers are exploiting outdated versions of WordPress and plug-ins to alter thousands of websites in an attempt to trick visitors to download and install malware.
The hackers aim to spread malware capable of stealing passwords and personal information from Windows and Mac users.
The hacking campaign is widespread and targets popular websites, using a 'spray and pay' approach to compromise anyone who visits these sites.
The malware being pushed includes Amos, which targets macOS users, and SocGholish, which targets Windows users.