Even worse, it appears that BadNews is polymorphic, that is, it changes its own code structure depending on its deployment parameters making it considerably harder to detect and remove.
These are ground-up, web-centric tools for visually manipulating the parameters of the standard HTML5, CSS and JavaScript code that the contemporary web is made out of.