Catching Up With The EITest Compromise, A Year Later

Dozens of WordPress sites have been compromised with the same malicious code redirecting to the Angler exploit kit. The attack involves conditionally embedded large snippets of code at the bottom of the sites source page. The Independents blog was running an old version of WordPress (2.9.2) The latest WordPress version is 4.3.1.1. This is the same attack pattern we documented over a year ago (Exposing the Flash EITest malware campaign)”]

Source: https://blog.malwarebytes.com/cybercrime/2015/11/catching-up-with-the-eitest-compromise-a-year-later/