Deceptive WordPress “Security” Plugin Grants Hackers Covert Admin Access

A sophisticated malware campaign is targeting WordPress sites with fake security plugins, primarily "WP-antymalwary-bot.php," which provides attackers with administrator access and remote code execution capabilities. The malware employs advanced persistence mechanisms, including a modified...