WordPress users beware - GootLoader strikes again, using font hack to spread malware

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GootLoader Malware Resurfaces to Target WordPress Users with Font Hack GootLoader malware reappeared in late October 2025 after a nine-month absence, targeting WordPress users. The malware is delivered through malicious JavaScript embedded in custom fonts on compromised websites, facilitating ransomware attacks. 2 sources 44