An injection into the wp-login.php file that secretly steals your WordPress login information.

Attackers continue to find easy victims by crawling websites using enumeration techniques and looking for configuration files that have had their file extension modified.

Hackers use JavaScript injections to redirect visitors to specific websites to collect affiliate referrals.

A large attack campaign that has been targeting vulnerable WordPress websites and using JavaScript injections to redirect victims to scams or malicious URLs.

Almost identical to the one from back in March 2021 except this uses convert-server.com as the exfiltration domain.