The ClickFix Plugin That Deletes Rival Malware From Your Pages: A WordPress Teardown
A hidden WordPress plugin served a fake captcha, decrypted itself only in the browser and deleted rival attackers' scripts from the page. Teardown and hunting commands.
Read Article