Another Fake Cloudflare Verification Targets WordPress Sites

A new Cloudflare infection has once again been targeting WordPress sites. This new iteration of malware mimics a legitimate-looking Cloudflare verification page, which then tricks victims into following various commands and downloading malware.

This style of malware is not new – our researcher Ben Martin wrote about a similar campaign targeting WordPress sites back in March. The difference between this new infection and previous ones is the location of where the malware is located – spread out among multiple themes and fake plugins.

Continue reading Another Fake Cloudflare Verification Targets WordPress Sites at Sucuri Blog.