LARGE-SCALE SIGN1 MALWARE CAMPAIGN ALREADY INFECTED 39,000+ WORDPRESS SITES

Summary from the TLDR InfoSec newsletter

A large-scale malware campaign called Sign1 has infected over 39,000 WordPress sites in the last six months. The attackers injected malicious JavaScript that redirected visitors to harmful websites. The malware uses dynamic URLs and only runs if visitors do not come from popular websites to avoid detection.