Fake Cloudflare CAPTCHA Malware in WordPress Environments

This malware injects obfuscated JavaScript into WordPress sites, masquerading as a legitimate Cloudflare CAPTCHA verification page. It redirects users to malicious domains or tricks them into performing actions that lead to further infections, such as downloading malware or enabling browser exploits. Commonly found in compromised themes and plugins, it exploits trust in Cloudflare’s branding for social engineering attacks.