How I tracked WordPress spam links to their plugin malware Tracking down a spam function in a rogue version of the Logos Showcase plugin.