Screenshot of the apache.org defacement (10 years ago)

We recently published a case study of the apache.org defacement that happened 10 years ago. You can read it here: Apache.org defaced – Security archive case study

We didn’t publish the screenshot of the defacement, but our friend @EdiStrosar sent us a link to it. Check it out:
Very funny…

David Dede

David is a Security Researcher at Sucuri. He spends most of his time dissecting vulnerabilities and security issues. You won't find him on Twitter because he is paranoid about privacy.

Related Tags

How Stolen Ecommerce Data is Sold on the Darknet

Luke Leal
May 1, 2019

We have recently published posts regarding banking malware and some of the ways it uses compromised websites to infect victim’s devices (smartphones, computers, POS terminals).…

Read the Post

Sign1 Malware: Analysis, Campaign History & Indicators of Compromise

Ben Martin
March 20, 2024

A new client recently came to us reporting seemingly random pop ups occurring on their website. While it was clear that there was something amiss…

Read the Post

Mayhem malware still on the wild

Jose Martinez
September 19, 2017

Years ago, colleagues from Yandex introduced the concept of Mayhem infections. In that post, they provided very detailed information about the malware, its functionalities and…

Read the Post

Hex’ing the CSS Style Attribute for Black Hat SEO

Ahmad Azizan Idris
May 16, 2019

Dealing with Black Hat SEO injections on our daily operation is always fun and challenging at the same time. One day, we may work with…

Read the Post

Unwanted Pop-ups Caused by Injectbody/Injectscr Plugins

Denis Sinegubko
February 12, 2018

On February 8th, 2018, we noticed a new wave of WordPress infections involving two malicious plugins: injectbody and injectscr. These plugins inject obfuscated scripts, creating…

Read the Post

April Fool’s Day – TYPO3 Overtakes WordPress as Most Attacked CMS Due to Popularity

Val Vesa
April 1, 2019

Disclaimer: This is an April Fool’s Day blog post and not all the information below is accurate. If you are looking for updated information on…

Read the Post

AccessPress Themes Hit With Targeted Supply Chain Attack

Ben Martin
January 20, 2022

Security researchers at Automattic recently reported that the popular WordPress plugin and theme authors AccessPress were compromised and their software replaced with backdoored versions. The…

Read the Post

Spamdexing: What is SEO Spam & How to Remove It

Rianna MacLeod
June 29, 2023

Ever had an uninvited guest crash your party, resulting in chaos, confusion, and some unhappy visitors? Well, SEO spam is that party crasher — just…

Read the Post

PCI Compliance, Penetration Testing, and the Sucuri WAF

Marc Kranat
March 6, 2020

Our support team is often asked, “Can we test our site through the Sucuri Web Application Firewall?” The answer is always yes, with a caveat.…

Read the Post

Persistent Cross-site Scripting in WP Live Chat Support Plugin

John Castro
May 15, 2019

During a routine research audits for our Sucuri Firewall, we discovered an Unauthenticated Persistent Cross-Site Scripting (XSS) affecting 60,000+ users of the WP Live Chat…

Read the Post

Related Tags

Related Categories

You May Also Like