Highly Effective Joomla Backdoor with Small Profile
Fioravante Souza It feels like every day we’re finding gems, or what appear to be gems to us. We try to balance the use of the term,…
Month: February 2014
12 posts
Sucuri CloudProxy Website Firewall Improvements
Daniel Cid If you are are a regular reader of our blog you probably know about our CloudProxy Website Firewall, it launched publicly a year ago. Since…
SiteCheck Chrome Extension Now Available
Have you ever wondered if the websites you (or your family) visit contain code that is potentially harmful to you or your computer? If you…
Malicious iFrame Injections Host Payload on Tumblr
It’s always fun to watch malware developers using different techniques to code their creations. Sometimes it’s a matter of obfuscation, placement, injection, but this time…
PHP Backdoors: Hidden With Clever Use of Extract Function
When a site gets compromised, one thing we know for sure is that attackers love to leave malware that allows them access back into the…
Mysterious Zencart Redirects Leverage HTTP Headers
Denis Sinegubko About a week ago we got an interesting Zencart case. Being that we don’t often write about Zencart we figured it’d be good time to…
Not Just Pills or Payday Loans, It’s Essay SEO SPAM!
Estevao Avillez Remember back in school or college when you had to write pages and pages of long essays, but had no time to write them? Or…
Joomla JomSocial Remote Code Execution Vulnerability
The JomSocial team just released an update that fixes a very serious remote code execution vulnerability that affects any JomSocial version older than 3.1.0.4. From…
Darkleech + Bitly.com = Insightful Statistics
This post is about how hackers abuse popular web services and how this helps security researchers obtain interesting statistics about malware attacks. We, at Sucuri,…
Layer 7 DDOS – Blocking HTTP Flood Attacks
There are many types of Distributed Denial of Service (DDOS) attacks that can affect and bring down a website, and they vary in complexity and…
Many Pieces of a Puzzle: Target, Neiman Marcus and Website Hacking
David Dede Corporations get hacked all the time. This is not news to anyone in the security business, but it has certainly received a lot of attention…