We all hear of APT (advanced persistent threat) and this is a good example of one trying to steal the vl.com domain. Very good read:
APT – Attempting to steal your domain
You May Also Like
Uncommon Radixes Used in Malware Obfuscation
Denis Sinegubko Some JavaScript features allow for pretty interesting obfuscation techniques. For example, did you know that virtually any English word can be used as a valid…
Optimize Setup to Improve Your Website Resilience for DDoS Attacks
Northon Torga Distributed denial-of-service (DDoS) attacks can disrupt website traffic and impact any business. To help website owners and webmasters improve their website resilience to DDoS attacks,…
Vulnerable Plugin Exploited in Spam Redirect Campaign
Ben Martin Some weeks ago a critical unauthenticated privilege escalation vulnerability was discovered in old, unpatched versions of the wp-user-avatar plugin. It also allows for arbitrary file…
Cronjob Backdoors
Cesar Anjos Attackers commonly rely on backdoors to easily gain reentry and maintain control over a website. They also use PHP functions to further deepen the level…
Fear, Uncertainty, and Doubt
There’s a term for the practice of scaring potential customers into purchasing products or services they don’t need: FUD; fear, uncertainty, and doubt. This practice…
Hackers Are Just as Vulnerable as You
Luke Leal I came across some interesting defacement pages recently and noticed a peculiar JavaScript injection included within each source code of the defaced websites. As shown…
Quick Guide to Magento Security Patches
Kyle Knight Magento remains a popular ecommerce platform in 2025 and its security patches play a vital role in addressing vulnerabilities that could otherwise be exploited by…
Free Sucuri WAF for Medical & Social Services
Chase Watts During the COVID-19 pandemic, there is concern about health systems worldwide. Many people in isolation or self-quarantine are looking for accurate medical information online on…
The Mystery Admin User
One of our clients recently submitted a malware removal request with a curious problem: A mystery admin user kept getting re-created on their website. Try…
Malicious Magento User Creator
Krasimir Konov We recently found a simple malicious script leveraging Magento’s internal functions to create a new admin user with the admin role “Inchoo” — probably referring…