Product Update: Sucuri Firewall in Sophia
Bruno Zanelato Sucuri provides security for websites with the protection of our Web Application Firewall (WAF). We also have our proprietary Anycast content delivery network (CDN) that…
Leveraging Stored Procedures for Nefarious Purposes
Here at Sucuri, we clean thousands of websites on a daily basis, and while some of them are easy to solve, others may require more…
W97M/Downloader Malware Dropper Served from Compromised Websites
W97M/Downloader is part of a large banking malware operation that peaked in March 2016. Bad actors have been distributing this campaign for well over a…
Backdoor Uses Paste Site to Host Payload
Finding backdoors is one of the biggest challenges of a website security analyst, as backdoors are designed to be hidden in case the malware is found…
Backdoor using paste site to host payload
Over the last months, we’ve been talking a lot about new ways to decode complex malwares that involve the usual PHP functions like eval, create_function,…
Attackers leveraging WP Maintenance plugin to deface websites
Recently, during a website investigation, we detected that attackers have been modifying the database structure of WP Maintenance plugin (which is a very popular wordpress…
Ecommerce Security: Fake Jquery Used as CC Scraper
In the last few months, we noticed an increase in attacks targeting ecommerce platforms aiming to steal credit card information. We saw a similar rise…
SF9 Realex Magento Module Targeted by Credit Card Scrapers
Attackers are constantly developing new techniques to compromise ecommerce websites and steal sensitive data. Over the last several weeks, we tracked massive attacks against Magento…
Joomla Security – Pornography Spam Campaign in the Wild
One of the worst experiences for a website owner is finding out that the search results for your site have turned into a pharmacy, a…
Session Stealer Script Used In OpenCart
With so many open-source ecommerce platforms available in the market, selling online is an appealing and easy option for any store owner. In a few…
Malicious Redirect Injected in Magento One Page Checkout
With the holiday season around the corner, ecommerce sites are very valuable to website owners and equally attractive to attackers. Hackers have been targeting Magento…