We just added two tools to generate OSSEC rules online.
You May Also Like
What Motivates Website Malware Attacks?
- May 28, 2025
The depiction in the media of hackers tends to be that of balaclava-wearing villains who type furiously in a dark basement, motivated by nothing but…
Backdoor Targets FreePBX Asterisk Management Portal
- December 15, 2022
Written in PHP and JavaScript, FreePBX is a web-based open-source GUI that manages Asterisk, a voice over IP and telephony server. This open-source software allows…
Uncommon Radixes Used in Malware Obfuscation
- March 15, 2019
Some JavaScript features allow for pretty interesting obfuscation techniques. For example, did you know that virtually any English word can be used as a valid…
Abandoned US Congressional Website Used in Asian Gambling Spam Infection
- July 26, 2023
Website owners and developers tend to buy a lot of domains. With different projects on the go and working with multiple different clients at any…
“Google Fonts” popup leads to malware
- September 10, 2018
A recent malware injection in a client\’s WordPress file was found to be targeting website visitors that were using the Google Chrome browser to access…
7 Scary Good Tips to Secure Your Website
- October 25, 2021
Nothing pairs quite as well as cybersecurity and Halloween. Prepare for more than trick-or-treaters this spooky season with these 5 wicked Website Security tips. 1…
AccessPress Themes Hit With Targeted Supply Chain Attack
- January 20, 2022
Security researchers at Automattic recently reported that the popular WordPress plugin and theme authors AccessPress were compromised and their software replaced with backdoored versions. The…
Hacked Website Threat Report – 2022
- April 5, 2023
Education is crucial in defending your website against emerging threats. That’s why we are thrilled to share our 2022 Website Threat Research Report. Disseminating this…
WordPress 5.8.3 Security Release
- January 7, 2022
On January 6th, an important security update was released for the WordPress core addresses four separate vulnerabilities. WordPress website administrators are advised to update their…
JavaScript Malware Switches to Server-Side Redirects & DNS TXT Records as TDS
- Last Updated: June 5, 2024
Last August we documented a malware campaign that was injecting malicious JavaScript code into compromised WordPress sites to redirect site visitors to VexTrio domains. The…







