We all hear of APT (advanced persistent threat) and this is a good example of one trying to steal the vl.com domain. Very good read:
APT – Attempting to steal your domain
You May Also Like
Improvements to SiteCheck Website Scanner
Jonas Andrijauskas SiteCheck is Sucuri’s free website malware and security scanner offered to anyone who wants to scan their websites for malware and blacklist status. Last year,…
Finding & Fixing Google Blocklist Warnings
Ashley Sand When a website is added to a blocklist by blocklist authorities it can be painfully stressful for their business. SEO rankings take a dive, and…
WordPress Database Upgrade Phishing Campaign
Denis Sinegubko We have recently been notified of phishing emails that target WordPress users. The content informs site owners that their database requires an update and looks…
WordPress Hacked: What to Do When Your Site is Compromised
Rianna MacLeod OK – your WordPress site is hacked. Now what? Questions we frequently get from new users are, “Why was my WordPress site hacked?” and “What…
Wikipedia Page Review Reveals Minr Malware
Since December, we’ve seen a number of websites with this funny looking obfuscated script injected at the very top of the HTML code (before the…
Reflected XSS in WordPress Plugin Admin Pages
Antony Garand The administrative dashboard in WordPress is a pretty safe place: Only elevated users can access it. Exploiting a plugin’s admin panel would serve very little…
Hiding malicious code from the user using white spaces
Yuliyan Tsvetkov Over the years, attackers have used different techniques for hiding malicious files on websites. They obfuscated code, changed legit functions to execute malware, modified whole…
Critical Vulnerabilities in 123contactform-for-wordpress WordPress Plugin
Rodrigo Escobar In mass infection scenarios, our Malware Research team often looks for attack vectors to find patterns and other similarities among compromised websites. The identification of…
Sucuri WAF Now Supports HTTP/3: A Faster and More Secure Web Experience
Kyle Knight We’re excited to announce that the Sucuri Web Application Firewall (WAF) now supports HTTP/3, the latest version of the HTTP protocol. This upgrade brings significant…
SocGholish Malware: Script Injections, Domain Shadowing, IPs & Obfuscation Techniques
In June 2022, we shared information about the ongoing NDSW/NDSX malware campaign which has been one of the most common website infections detected and cleaned…