Understanding Search Engine Warnings – Part I – Google – This Site May Be Hacked
Daniel Cid If you have any questions about malware, blacklisting, or security in general, send them to us: contact@sucuri.net and we will answer here. For all the…
Month: October 2013
8 posts
Backdoor Evasion Using Encrypted Content
A few weeks ago on the Sucuri Research Labs we mentioned a new type of malware injection that does not use base64_decode, and instead conceals…
Cleaning Up Your WordPress Site with the Free Sucuri Plugin
Update 9/9/16: We released a new guide to cleaning a hacked WordPress site with our plugin. If your site has been recently hacked and you…
Sucuri CloudProxy WAF Plugin for WordPress
If you are using our CloudProxy WAF to protect your WordPress websites, we highly recommend that you also install our new CloudProxy plugin for WordPress.…
Do you still look for base64_decode?
A common keyword that people use to find hidden injections on web sites is base64_decode. Youoften see injections that look like eval ( base64_decode or…
Avira, AVG and WhatsApp Defaced
Estevao Avillez If you visited the web sites for Avira, AVG or WhatsApp this morning, you probably saw that they didn’t look like they should. All of…
WHMCS SQL Injection Vulnerability in the Wild
A few days ago, a zero-day SQL injection vulnerability in WHMCS was disclosed by localhost.re, along with the exploit code. It was quickly patched by…
Malware iFrame Campaign from Sytes(.)net
For the last few weeks we have been tracking a large malframe (malicious iframe) campaign that has been injecting iframes from random domains from sytes(.)net…