Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks
Posted on October 8, 2025 • 1 min read • 57 wordsCybersecurity researchers are calling attention to a nefarious campaign targeting WordPress sites to make malicious JavaScript injections that are designed to redirect users to sketchy sites. Site visitors get injected content that was drive-by malware like fake Cloudflare verification, Sucuri researcher Puja Srivastava said in an analysis published last week. The website
Cybersecurity researchers are calling attention to a nefarious campaign targeting WordPress sites to make malicious JavaScript injections that are designed to redirect users to sketchy sites. “Site visitors get injected content that was drive-by malware like fake Cloudflare verification,” Sucuri researcher Puja Srivastava said in an analysis published last week. The website security company