Balada Injector: Synopsis of a Massive Ongoing WordPress Malware Campaign

During the many years of Balada Injector’s operation since 2017, Sucuri researchers have observed consistent patterns of infection waves on a pretty regular basis. These waves tended to occur every couple of weeks, sometimes once a month.