In 2023, a fake “WPML Pro Nulled” was distributed via Telegram. It gave hackers full admin access to over 2,000 sites within 48 hours.