Security researchers have spotted a spike in the number of WordPress sites hit by a massive advertising scam this weekend. The attack appears to be more focused on earning revenue through affiliate schemes than infecting the computers visiting hacked webpages. The malware uploads multiple backdoors into various locations on the webserver and frequently updates the injected code. This is why many webmasters are experiencing constant reinfections post-cleanup of their.js files. This means that if you host several domains on the same hosting account all of them will be infected via a concept known as cross-site contamination.”]
Source: https://grahamcluley.com/websites-running-wordpress-hacked-display-money-making-ads-hackers/