Cybersecurity experts are sounding the alarm about a growing threat to online security that’s been spreading rapidly across the globe. A new malware campaign, leveraging a sophisticated exploit kit known as “Grief”, has emerged, compromising thousands of websites and leaving many more vulnerable to attack.
The Grief exploit kit is designed to target vulnerabilities in outdated software, specifically older versions of WordPress plugins and themes. When an unsuspecting visitor navigates to a compromised website, the malware injects malicious code into their browser, giving hackers remote access to sensitive information. According to reports from cybersecurity researchers, the Grief campaign has already infected over 10,000 websites worldwide, with many more potentially at risk.
The way this works is relatively straightforward: attackers identify vulnerable sites and exploit these weaknesses using the Grief kit. This allows them to plant malware on the site that can be used for a range of malicious activities, from stealing login credentials to spreading further attacks on visitors’ devices. What’s particularly concerning about this campaign is its ability to target multiple platforms, including Windows, macOS, and Linux systems.
The scale of the Grief threat highlights a pressing issue in online security: the failure to address known vulnerabilities in time. As many as 50% of all websites run outdated software or plugins that are no longer supported by their developers. This creates an environment where hackers can easily exploit these weaknesses to gain access to sensitive information and wreak havoc on users’ devices.
The Grief campaign also underscores the importance of keeping software up-to-date, particularly for website owners who often overlook this crucial step in protecting their online presence. As cybersecurity experts emphasize, “This is not a problem that will magically fix itself; it’s only by taking proactive steps to secure our digital infrastructure that we can prevent further attacks and protect users from harm.” With thousands of websites already compromised, the time to act is now.
For website owners, this means ensuring all software and plugins are updated regularly. Visitors should also be cautious when navigating online, as even reputable sites may unknowingly host malicious code. By being aware of these threats and taking necessary precautions, we can mitigate the risks associated with the Grief campaign and stay one step ahead of hackers.
Source: SANS ISC — 2026-08-10