Thousands of WordPress sites impacted by Sign1 malware campaign

Threat actors behind the campaign have deployed brute-force attacks to infiltrate WordPress sites before exploiting HTML widgets and the Simple Custom CSS and JSS plugin to facilitate Sign1 malware injection.

attacks brute brute-force campaign cloud security css exploiting html injection malware malware campaign plugin simple threat threat actors wordpress wordpress sites