Website Malware Infections

New FSF web site

The web site for the Free Software Foundation has been completely redesigned.

It is looking great now with a Jquery carousel and a web 2.0 feel. Thanks for http://sucuri.net for alerting me on that change. Here is the message I got today:

Sucuri nbim: www.fsf.org content modified

Modifications:
25a26,53
>
>
>

David Dede

David is a Security Researcher at Sucuri. He spends most of his time dissecting vulnerabilities and security issues. You won't find him on Twitter because he is paranoid about privacy.

Throwback Threat Thursday: Joomla GoogleMaps Plugin SEO Spam Injection

Fioravante Souza
September 5, 2019

Throwback Threat Thursday is a series of posts where we recall older vulnerabilities that have since been patched by their developers. In the past, these…

Read the Post

Amazon Affiliate Cookie Stuffing

Denis Sinegubko
January 25, 2017

We wrote a lot about malware in invisible iframes. This story is about a different type of invisible iframes that hackers may place on your…

Read the Post

WordPress Overtakes Magento in Credit Card Skimmers

Ben Martin
April 4, 2022

One of the most important monitoring tools in our security platform is our Sucuri SiteCheck scanner. It’s a free tool to scan your website for…

Read the Post

Most Interesting Vulnerabilities of 2021

Ashley Sand
December 27, 2021

As with most years, there’s been a wide array of critical vulnerabilities found within content management systems, plugins, API keys, etc. We’ll be recapping our…

Read the Post

Wrong content-type to XSS

John Castro
November 22, 2019

WordPress Social Sharing Plugin – Sassy Social Share, which currently has over 100000 installations just fixed a Cross Site Scripting Vulnerability. This bug allows attackers…

Read the Post

Magento 2 PHP Skimmer Saves To Image File

Magento 2 PHP Credit Card Skimmer Saves to JPG

Luke Leal
March 10, 2021

Bad actors often leverage creative techniques to conceal malicious behaviour and harvest sensitive information from ecommerce websites. A recent investigation for a compromised Magento 2…

Read the Post

Google Analytics Swiper Disguised as Legitimate Traffic

Denis Sinegubko
July 23, 2019

At first glance, this short script looks like benign Google Analytics code: <script type=”text/javascript”> (function() { var ga = document.createElement(‘script’); ga.type = ‘text/javascript’; ga.async =…

Read the Post

New variant of “trollherten” malware

Luke Leal
July 31, 2019

We continue to see new variations of obfuscation used to hide a PHP backdoor that began to be heavily used by malicious users in late…

Read the Post

Stored XSS in Elementor

Marc-Alexandre Montpas
January 29, 2020

During a routine audit of WordPress plugins last december, we discovered a Stored XSS vulnerability in the very popular Elementor Page Builder plugin, which powers…

Read the Post

PrestaShop SuperAdmin Injector and Login Stealer

Luke Leal
November 18, 2020

According to W3Tech’s data, PrestaShop is among the most popular CMS choices for existing ecommerce websites, so it should come as no surprise that malware…

Read the Post

Related Categories

You May Also Like