Rogue WordPress Plugin Exposes E-Commerce Sites to Credit Card Theft

Threat hunters have discovered a rogue WordPress plugin that's capable of creating bogus administrator users and injecting malicious JavaScript code to steal credit card information.
The skimming activity is part of a Magecart campaign targeting e-commerce websites, according to Sucuri.
"As with many other malicious or fake WordPress plugins it contains some deceptive information at

bogus campaign card code commerce credit credit card e-commerce fake hunters information javascript magecart malicious plugin plugins rogue skimming steal sucuri targeting theft threat websites wordpress wordpress plugin wordpress plugins