Where we stumbled upon this malicious blog website:
https://urlhaus.abuse.ch/url/2083998/
Do not click that malware link given there.
Oudated Word Press CMS version. User Enumeration enabled. Directory Listing enabled.
Smoke Loader and dofoil malware downloads via malicious jpg file in theme.
polonus