Thousands of WordPress websites hit in new malware attack, here's what we know

Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS).

---

• Security researchers find more than 5,000 websites carrying a piece of malicious code
• The malware installs a plugin that steals login credentials and sensitive data
• The researchers recommended a number of mitigation measures