Do Son A malware campaign is hijacking WordPress sites with fake Java update pop-ups, tricking visitors into downloading malicious executables.
fake plugin
Wordfence warns of malware posing as a WordPress plugin that enables admin access, hides itself, and executes remote code via REST API and cron jobs.
A new phishing campaign targets WooCommerce users with fake security alerts. Learn how attackers use IDN homographs and malicious plugins to compromise stores.