We all hear of APT (advanced persistent threat) and this is a good example of one trying to steal the vl.com domain. Very good read:
You May Also Like
Fake Instagram Verification & Twitter Badge Phishing
- August 9, 2022
Social media platforms like Instagram and Twitter offer verification badges as a credibility indicator to help show authenticity and integrity to visitors. To obtain a…
SiteCheck Malware Trends Report – Q2 2022
- July 7, 2022
For the latest malicious scripts, check out our SiteCheck 2023 Mid-Year Malware Trends report. Conducting an external website scan for indicators of compromise is one…
What Should You do if Your WordPress Site was Hacked?
- January 19, 2022
These days WordPress infections are very common. In 2021, internetlivestats.com counted over 81 million websites hacked. If you’re one of the millions, you need to…
JavaScript Malware Switches to Server-Side Redirects & DNS TXT Records as TDS
- Last Updated: June 5, 2024
Last August we documented a malware campaign that was injecting malicious JavaScript code into compromised WordPress sites to redirect site visitors to VexTrio domains. The…
Real-Time Phishing Kit Targets Brazilian Central Bank
- January 14, 2021
We recently found an interesting phishing kit on a compromised website that has QR code capabilities, along with the ability to control the phishing page…
Whitespace Steganography Conceals Web Shell in PHP Malware
- February 2, 2021
Last November, we wrote about how attackers are using JavaScript injections to load malicious code from legitimate CSS files. At first glance, these injections didn’t…
How to Know If You Are Under DDoS Attack
- July 1, 2019
Nowadays, DDoS is a pretty recognizable term. Though many webmasters don’t know exactly what a DDoS attack is—its method is very subtle to identify—they’re pretty…
How Some OTP Systems Can Be Used to Prank Spam
- July 25, 2018
I recently came across an interesting index.php file and its corresponding directory on a compromised website. I loaded it in a testing environment and immediately…
What is HTTP 504 Gateway Timeout & How to Fix It
- May 14, 2024
Website errors can be extremely frustrating, and one that often appears is the 504 Gateway Timeout error. This error occurs when an upstream server fails…
Everything You Need to Know About Web Application Firewalls
- January 24, 2022
WAFs (Web Application Firewalls) are nothing new as they used to primarily be deployed by large organizations. In today’s modern web however, they’re becoming increasingly…








