Researchers expose new WordPress malware and ClickFix phishing kits exploiting cache smuggling for stealth attacks.