There are many variations to the Counter.php malware floating around the interwebs. This is a malicious redirect that sends your readers to a known bad site, that site houses a payload that responds based on the incoming user-agent.
- Malicious Site: natbushing.com
- Payload: counter.php
Check out Sucuri Labs for more variations of Counter.php