Of Nulled WordPress stuff. Recently, my web server got hit so hard by SEO malware creating posts and altering WordPress core files. This malware spouts from a nulled plugin I downloaded a couple of months ago.
It began with inserting an EVAL function in the header of all PHP files in any directory it could possibly find. Including your core WordPress files. This function is one of the worst ever existed in PHP which is eval you can read on it and its vast capabilities.
The nomenclature of this malware is Ion Cube malware. The worst part of this malware is how it can masquerade you by creating WordPress-alike files one of the most famous examples can be:
wp-feed.php
wp-tmp.php
WordPress doesn't have these files in their core files. So if you are not a rookie and strong observer you will be easily get tricked by. So again take all the precautions, as currently am struggling to backup 20+ websites.
Good Luck
