Some WordPress sites are at risk of being targeted by a fake Pirate Bay copycat site that is launching attacks, according to Malwarebytes researchers.

The campaign uses compromised WordPress sites as a means to redirect customers to a page with an exploit kit.

All of the compromised sites appear to be injected with the same iframe that is sending users to thepiratebay.in.ua incorrectly. This is not the official Pirate Bay site, it is a clone that is allowed to exist as a result of TheOpenBay initiative.

The copycat site is actively pushing the Nuclear exploit kit and appears to be exposing a Flash Player vulnerability and downloading a banking Trojan.

You can keep your site safe by updating your Flash Player, WP Install, and plugins that you use.

➤ Compromised WordPress sites launch drive-by attacks off Pirate Bay clone [Malwarebytes]

Read next: Facebook launches Riff, an app for making videos with your friends