WordPress compromises: What’s beyond the URL?

One of the many tricks in the modern cybercriminal miscreant’s toolbox is using compromised websites to evade spam filters and domain reputation systems. Whether hiding a web-based exploit or just getting a free ride on the reputation of otherwise legitimate domains, using an existing domain name has multiple benefits – and that’s not even taking into account the fact that stealing someone else’s domain is cheaper than buying one. In this article we’ll take a look beyond the URL of a compromised WordPress website to provide some insight into what goes on once a website has been…