The malware does its best to obfuscate SEO injection in WordPress and evade notice from web admins.
Source: Threadpost