Browser Extension Bug Leads to Post Injection
Cesar Anjos A few years ago, we saw how a browser extension introduced a threat to serve unwanted ads. Today, the number of browser extensions available to…
Using Innocent roles to hide admin users
All across the internet we find guides and tutorials on how to keep your WordPress site secure, and they all approach the concept of user…
Magento Credit Card Stealer Reinfector
In the past few months, we have frequently seen how attackers are infecting Magento installations to scrape confidential information such as credit cards, logins, and PayPal…
Magento CC Stealer Reinfector
We have seen many times in the past few months how attackers are infecting Magento installations to scrape confidential information such as credit cards, logins,…
Shell Logins as a Magento Reinfection Vector
Recently, we have come across a number of websites that were facing reinfection of a credit card information stealer malware within the following files: app/Mage.php;…
Malicious Activities with Google Tag Manager
If I were to ask if you could trust a script from Google that is loading on your website, the majority of users would say…
Server-level Cryptominer Injections
During an investigation on a recent case, we came across a malware infection that came directly from the server. Upon further inspection, we found that…
Evolution of Conditional Spam Targeting Drupal Sites
Last year we took a look at how attackers were infecting Drupal installations to spread their spam and keep their campaigns going by just including…
When Your Plugins Turn Against You
Every day we face countless cases of sites getting compromised and infected by an attacker. From there, the sites can be used for various operations…
Undesired Redirects
Whether it is your own or a website you are visiting, undesired redirects and pop-ups are always annoying. The situation gets worse when your visitors…
New Non-HTTPS Websites Blacklisted for Phishy Password Practices
We submit hundreds of blacklist review requests every day after cleaning our clients’ websites. Google’s Deceptive Content warning applies when Google detects dangerous code that…