Double hedging
https://www.bleepingcomputer.com/news/security/fake-wordpress-plugin-comes-with-cryptocurrency-mining-function/
Malicious plugins for WordPress websites are being used not just to maintain access on the compromised server but also to mine for cryptocurrency.
Researchers at website security company Sucuri noticed the number of malicious plugins increase over the past months. The components are clones of legitimate software, altered for nefarious purposes.