A recent wave of SocGholish malware infections has been targeting WordPress websites by compromising administrator accounts and uploading fake versions of legitimate plugins containing malicious code. The malware tricks users into downloading remote access trojans leading to ransomware attacks.