Over 20,000 WordPress Sites Infected by DollyWay Malware: How to Protect Yourself

DollyWay malware infects 20,000

 A persistent malware campaign, known as DollyWay, has infected over 20,000 WordPress sites globally, redirecting users to fraudulent gambling, cryptocurrency, and sweepstakes websites. This malware has been tracked by security researchers at GoDaddy, who note that DollyWay continues to evolve, improving its evasion tactics and reinfection methods. Given its ability to bypass security measures and repeatedly infect sites, WordPress website owners must take immediate action to safeguard their platforms.

What is DollyWay Malware?

DollyWay has been circulating since at least 2016, currently generating over 10 million impressions per month, which makes it highly lucrative for cybercriminals. The malware targets vulnerabilities in outdated WordPress plugins and themes, injecting malicious code that reroutes site visitors to scam websites.

One of DollyWay's key evasive strategies is its activation method: it only triggers redirects when a user clicks on certain elements, meaning that logged-in administrators, bots, and direct visitors typically don’t see the redirection. This makes it particularly hard for security tools to detect and block the threat.

How to Protect Your WordPress Site from DollyWay and Other Malware

1. Keep Plugins and Themes Updated Cybercriminals often exploit known vulnerabilities in outdated software. Regularly update your WordPress plugins, themes, and core files to ensure you have the latest security patches and avoid leaving your site exposed.

2. Use Reliable Security Plugins and Monitoring Tools Install trusted firewall and malware detection plugins like Wordfence , Sucuri. These tools monitor for suspicious activity and can help identify unauthorized changes to your site before they cause significant damage.

3. Restrict Access and Implement Strong Authentication Limit administrative access to trusted individuals only. Use strong, unique passwords for all user accounts, and enable two-factor authentication (2FA) to add an extra layer of protection against unauthorized logins.

4. Perform Regular Backups Regular backups are essential in case your site gets compromised. Ensure you have up-to-date backups that allow you to restore your website without losing valuable data.

5. Scan for Malware and Clean Infected Files Use comprehensive security tools to scan your site for any malicious scripts or code. If you detect malware, follow WordPress security guidelines to remove the malicious code manually or seek professional assistance if needed.