Fake WordPress Plugins on 6,000 Sites Prompt Users to Install Malware

The malware campaign is based on ClickFix fake browser update malware and has infected over 6,000 sites since June 2024, totaling over 25,000 sites since August 2023. The hackers are using stolen credentials to install the bogus plugins.