An injection into the wp-login.php file that secretly steals your WordPress login information.