GootLoader hijacks WordPress sites to lure professionals to download malicious sample contract templates.

Threatpost