WP3.XYZ Malware Attacks Add Rogue Admins to 5,000+ WordPress Sites

Researchers at security firm c/side discovered during an incident response engagement for one of their clients that the malicious activity uses the wp3[.]xyz domain to exfiltrate data but have yet to determine the initial infection vector.