SoakSoak is a large malware campaign targeting and compromising over 100,000 WordPress sites. The attack vector is the RevSlider plugin, a premium premium plugin that is not easily upgraded. Some website owners dont even know they have it as its been packaged and bundled into their themes. The campaign is also making use of a number of new backdoor payloads, some are being injected into images to further assist evasion and others are being used to inject new administrator users into the WordPress installs.”]