Monthly Archives: June 2011

WordPress 3.1.4 available – Time to update

Posted on June 30, 2011 by David Dede

If you are running WordPress, it is time to update it now. WordPress v3.1.4 was just released with security fixes for all the previous versions (specially important with you have users with the editor-level permissions): From the WordPress blog: WordPress … Read more


Posted in wordpress | Tagged | Leave a comment

Phishing phone calls – Onlinesupport.com

Posted on June 28, 2011 by Daniel Cid

It was early morning (around 8am) and I received a phone call from someone asking for me by name (using a private number and with a strong Indian accent): Caller: Hello, Can I speak with XX?” (my real name) Me: … Read more


Posted in phishing, phone, security | Tagged , , | 12 Comments

WP-phpmyadmin WordPress plugin – Delete it now

Posted on June 22, 2011 by David Dede

If you are using the WP-phpmyadmin WordPress plugin, delete it now. We are seeing multiple sites getting hacked through it and we are investigating what is going on. On all the sites we’ve analyzed, the following code was found inside … Read more


Posted in phpmyadmin, plugin, vulnerability, wordpress | Tagged , , , | 25 Comments

WordPress plugins hacked – Understanding the backdoor

Posted on June 22, 2011 by David Dede

If you haven’t heard about it already, yesterday three popular WordPress plugins (AddThis, WPtouch, and W3 Total Cache) had a malicious backdoor added to them via the plugin repository. That lead to WordPress.org resetting all passwords as a precaution. You … Read more


Posted in backdoors, vulnerability, wordpress | Tagged , , | 5 Comments

Backup, backup and backup

Posted on June 21, 2011 by David Dede

We just heard of a sad story about an Australian web hosting company (Distribute.IT) that was hacked and all of the sites they hosted were deleted (almost 5 thousand of them). What’s even worse is that the attackers deleted and … Read more


Posted in backups, hacked, security | Tagged , , | 2 Comments

Google blacklisted all the .cz.cc domains

Posted on June 15, 2011 by David Dede

It seems that Google just blacklisted all the sites under the .cz.cc main domain (including the nic.cz.cc, start.cz.cc and all others). In their status page Google says: Has this site acted as an intermediary resulting in further distribution of malware? … Read more


Posted in blacklisted | Tagged | 18 Comments

Blackhat SPAM SEO From Joomlapoject.net – Targeting Joomla

Posted on June 14, 2011 by David Dede

We are tracking another Blackhat SEO SPAM network being managed by http://joomlapoject.net. By the name of the domain, you can guess that they are targeting Joomla sites. When you visit a compromised site, you don’t see anything wrong, but if … Read more


Posted in hacked, joomla, spam | Tagged , , | 1 Comment

Information Leakage on multiple WordPress themes by WooThemes

Posted on June 6, 2011 by David Dede

This weekend there was a post on the Full disclosure list about multiple vulnerabilities on some WordPress themes by WooThemes. This is what the message said: Vulnerable are the next themes by WooThemes: Live Wire (all three themes from Live … Read more


Posted in vulnerability, wordpress | Tagged , , | 2 Comments

Sony Music Brazil hacked (yet another sony defacement)

Posted on June 5, 2011 by David Dede

I hate to pick on Sony, but they got hacked again (and no, I am not talking about the Lulzsec + sonypictures, this is another one). This time was Sony Music Brazil, which was defaced yesterday night and STILL is … Read more


Posted in hacked, sony | Tagged , | 6 Comments

Links Injection on WordPress – Blackhat SEO Spam (basicpills) update

Posted on June 3, 2011 by David Dede

For the last few months we’ve been tracking a very large blackhat SEO spam campaign initiated by basicpills.com, and many other pharma-related domains (mostly located at 212.117.161.190 and 212.117.168.214). The method used is very simple, where the attackers inject a … Read more


Posted in malware, malware_updates, pharma, spam | Tagged , , , , | 3 Comments
RSS Delicious