Collected research
Soaksoak WordPress Malware
SoakSoak Malware Compromises 100,000+ WordPress Websites
The SoakSoak campaign compromised over a hundred thousand WordPress sites, correlating with the Slider Revolution plugin flaw. Attackers appended a wp_enqueue_script hook to wp-includes/template-loader.php so a trojaned swfobject.js loaded on every page, running an encoded eval loader that pulled further JavaScript from soaksoak.ru; Google blacklisted more than eleven thousand domains.
Record
- Document
- SoakSoak Malware Compromises 100,000+ WordPress Websites
- Published by
- Sucuri Blog
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Sucuri Blog, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .