Magbo Spam Injection Encoded with hex2bin

We recently had a new client come to us with a rather peculiar issue on their WordPress website: They were receiving unwanted popup advertisements but only when the website was accessed through links posted on FaceBook. Initially we thought that this must be a rogue ad coming through an otherwise legitimate advertising network but it turned out to be a very well crafted and hidden spam injection.

In this post we will review this infection, outline the steps we took …

advertisements advertising black hat tactics client coming facebook hacked websites hidden injection issue links network popup review rogue spam thought website website malware infections website security wordpress wordpress plugins and themes wordpress security