You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Great work Eli,
This is now a standard plugin for all sites, wouldn't be without it.
We look forward to your continued malware protection, detection and removal advancements. Keep it up! -- Edward