Malicious Script Injection on WordPress Sites

Recently, our team discovered a JavaScript-based malware affecting WordPress sites, primarily targeting those using the Hello Elementor theme. This type of malware is commonly embedded within legitimate-looking website files to load scripts from an external source. The malware injects a malicious external script into the theme’s header.php file, leading to harmful consequences for site owners and visitors.

Domains Involved:

• spadeanalytica[.]com
• uph-analytics[.

Continue reading Malicious Script Injection on WordPress Sites at Sucuri Blog.