There is nothing new or relevant about this post, and it is terribly explained (was the distinction between JS and Java really necessary?) I've dealt with thes

There is nothing new or relevant about this post, and it is terribly explained (was the distinction between JS and Java really necessary?) I've dealt with these a number of times in the past. Generally they involve a frontend exploit as described, but also a backend backdoor, so that even if the exploit is removed, they can reinfect. Both sets of code are often obfuscated then eval'd to run. Two stories: 1. I worked with a custom CMS infection once where someone infected every single PHP file with a combo frontend exploit + backdoor, just by checking to see if the function was already defined, then defining it if not. 2. With WordPress, someone included some relatively benign code that looked to be doing thumbnail manipulation, but it was actually reading malicious code out of a .ico file and evaling it. Took a while to find.