Thousands of WordPress Websites Hacked with New Sign1 Malware

**Sign1** is a newly identified malware campaign targeting WordPress sites that injects obfuscated code to redirect visitors to scam pages or serve unwanted ads; it uses time-based URL randomization and selective targeting of visitors and has reportedly infected over 39,000 WordPress sites, with researchers urging patching, strong security practices, and remediation steps.