I received an email from someone this morning asking me to correct a problem on their Wordpress site.  This in of itself is not unusual, but what I found when I went to their site was unusual.  In fact, it was cause for alarm.

The design issue was easy enough to fix, but I received warning messages from Google Chrome when entering their website and Avast was popping up warnings telling me it was blocking a malicious script.  I thought to myself, “That’s odd, it shouldn’t be doing that.”  I looked at another Wordpress website on his server and got the same warnings.

I looked at the source code for the homepage of each Wordpress website and couldn’t help but notice a fat little script injected at the bottom of the page right before the closing body tag.  The code read as follows:
[continue reading…]

{ 0 comments }