Netskope Threat Labs

BaladaInjected

AV

BaladaInjected is a detection for web pages compromised by the Balada malware campaign that injects malicious redirect scripts into WordPress sites.

First seen
May 2026
Last seen
September 2026
Alert Name
Generic.BaladaInjected.A.1D476DF4
Generic.BaladaInjected.A.28525D5F
Generic.BaladaInjected.A.33CA9829
Generic.BaladaInjected.A.59EE814A
Generic.BaladaInjected.A.5DC2A3BE
Generic.BaladaInjected.A.5F048D06
Generic.BaladaInjected.A.60DB56D3
Generic.BaladaInjected.A.63E70C10
Generic.BaladaInjected.A.72585021
Generic.BaladaInjected.A.7955CC74