Rogue WordPress Plugin Exposes E-Commerce Sites to Credit Card Theft

Threat hunters identified a rogue WordPress plugin used in a Magecart campaign that creates hidden admin users, persists in mu-plugins, and injects JavaScript skimmers (including via WebSockets and fake checkout overlays) to exfiltrate credit card data from e-commerce sites; the report additionally references dozens of JS-sniffer families and a large crypto-drainer fraud operation.