Hackers are once again using fake Google Chrome updates as means ... Once a website has been compromised by injecting malicious JavaScript code into it, the now hacked site executes scripts ...

Hackers are compromising websites to inject scripts that display fake Google Chrome automatic ... websites to inject malicious JavaScript code that executes scripts when a user visits them.

As detailed in a report by Sucuri, threat actors are hacking poorly protected WordPress sites to add a heavily obfuscated JavaScript payload that displays a fake Cloudflare protection DDoS screen.