How I tracked WordPress spam links to their plugin malwareTracking down a spam function in a rogue version of the Logos Showcase plugin.