The campaign has affected hundreds of WordPress websites. Attackers plant a rogue must-use plugin, named in the format ...