Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks
Cybersecurity researchers have identified a campaign that exploits WordPress sites by injecting malicious JavaScript, which redirects users to dubious websites. This tactic includes the use of drive-by malware, such as fake Cloudflare verification prompts.