WordPress websites are now breeding grounds for the LummaStealer trojan malware, targeting Windows users with malicious plugins and PowerShell commands.