Sucuri is now partnering with EvilFingers in a collective community effort to secure our users for free.
Check out their site: https://evilfingers.com/
Sucuri & EvilFingers: Technology Partners
You May Also Like
What is HSTS: HTTP Strict Transport Security
Kaushal Bhavsar HSTS or HTTP Strict Transport Security is a protocol that can make it more difficult for attackers to modify or intercept traffic between a user…
What Should You do if Your WordPress Site was Hacked?
Ashley Sand These days WordPress infections are very common. In 2021, internetlivestats.com counted over 81 million websites hacked. If you’re one of the millions, you need to…
The Importance of Website Backups
Juliana Lewis Imagine waking up in the morning to see that a couple of calls were missed and your email is overloaded with messages saying that your…
Server Side Data Exfiltration via Telegram API
Cesar Anjos One of the themes commonly highlighted on this blog includes the many creative methods and techniques attackers employ to steal data from compromised websites. Credit…
From .tk Redirects to PushKa Browser Notification Scam
Denis Sinegubko In the past couple of years, we’ve been tracking a long-lasting campaign responsible for injecting malicious scripts into WordPress sites. This campaign leverages old vulnerabilities…
NIST Cybersecurity Framework
The United States National Institute of Standards and Technology (NIST) has created a framework for improving critical infrastructure cybersecurity, referred to as the NIST Cybersecurity…
Malicious JavaScript Used in WP Site/Home URL Redirects
Luke Leal Our team recently found a malicious JavaScript injection within the WordPress index.php theme file on a compromised WordPress website which ultimately redirects site visitors to…
How Undefined Variables Can Give You RCE
Fernando Barbosa When investigating a compromised website, our team has to make sure that all malware and backdoors are cleared from the environment. In some instances, these…
Magento Phishing Leverages JavaScript For Exfiltration
During a recent investigation, a Magento admin login phishing page was found on a compromised website using the file name wp-order.php. This is an odd…
Array String Obfuscation
We continue to see an increase in the number of these PHP injections that use multiple obfuscation methods to evade detection, but lately one method…