A WordPress plugin, PhishWP, is being used by cybercriminals to collect sensitive data such as credit card numbers, CVVs and billing addresses from victims by creating fake payment pages. The plugin’s data is relayed to the attackers in real time via Telegram, with the harvested data used for fraudulent transactions or sold on the dark web. The plugin’s ability to convincingly mimic legitimate payment pages and evade detection makes it particularly dangerous.

47% of Manufacturing Breaches in 2024 Involved Ransomware
Summarize this content to a maximum of 60 words: KnowBe4 released its new report highlighting cybersecurity challenges facing the manufacturing industry.