Malicious JavaScript Injects Fullscreen Iframe On a WordPress Website

Last month, we came across an ongoing JavaScript-based malware campaign affecting compromised websites. The malware injects a fullscreen iframe that silently loads content from a suspicious external domain.

This type of malicious script aims to force users to view unsolicited content, often for ad fraud, traffic generation, or deceptive social engineering.

This is the fake cloudflare captcha that was shown when we access the malicious domain capcloud[.

Continue reading Malicious JavaScript Injects Fullscreen Iframe On a WordPress Website at Sucuri Blog.