Jay

///// UPDATE /////

I contacted my webhosting company and they promptly investigated to find several files maliciously added (approx 25-30).

Though @paulhanaki did identify the functions.php file was hacked, the webhosting company identified several WP files throughout the WP install (e.g. wp-content/themes, wp-includes, wp-admin). The files have since been removed.

The new files varied in titles, but several (but not all) were duplicate files with the following appended to the name: _ver1, _backup, _old, _new.

The files all contained the following code:

[hacked code removed – please do not post that on these forums]

I believe everything has been contained. Please reach out to me if others find out more.

Now I am on the latest (4.6). I am not sure exactly what version I was on when hacked, but it was <4.6.

Thanks for the link.

@paulhanaki, @vidyab, @fullbrainfilms I had the same problem this month (Dec 2014). I haven’t been able to confirm the date (possibly the 11 or 15)

PLUGINS
Business Hours
Contact Form 7 (this appears to be the same between ours)
Google Analyticator
Revolution Slider
W3 Total Cache (this appears to be the same between ours)