Malicious JavaScript Injects Fullscreen Iframe On a WordPress Website

A recent JavaScript-based malware campaign has been discovered targeting WordPress websites. The malware injects a fullscreen iframe from malicious domains, aiming to deceive users into executing a base64-encoded PowerShell command.