Block injected iframes, with the Element-hiding subscription, reported at [http://blog.dynamoo.com/2014/09/malicious-wordpress-injection-sending.html Dynamoo&#39;s Blog: Malicious WordPress injection sending to 178.62.254.78 and 176.58.100.98]: 16.html|$subdocument,third-party