Auto Generated IFrames To Blackhole Exploit Kit – Following the Cookie Trail
Daniel Cid We often talk about websites being compromised and injected with malware that redirect users to exploit kits. We unfortunately don’t give you a complete picture…
Who Really Owns Your Website? “Please Stop Hotlinking My Easing Script — Use a Real CDN Instead.”
For the last few days, we have had some customers come to us worried thinking that their websites were compromised with some type of pop-up…
Apache Binary Backdoors on Cpanel-based servers
For the last few months we have been tracking server level compromises that have been utilizing malicious Apache modules (Darkleech) to inject malware into websites.…
The WordPress Brute Force Attack Timeline
Authored by Daniel Cid, Tony Perez. We have been blogging about the massive brute force attacks against WordPress websites over the past few days, today…
Mass WordPress Brute Force Attacks? – Myth or Reality
We are seeing in the media some noise about a large distributed brute force attacks against all hosts targeting WordPress sites. According to reports, they…
When Good Plugins Go Bad – SEO Spam on Joomla Websites
We recently published an article about an interesting case where a very popular WordPress Plugin (Social Media Widget), with more than 900,000 downloads, got sold…
WordPress Plugin Social Media Widget Hiding Spam – Remove it now
Authored by Daniel Cid and Tony Perez. If you are using the Social Media Widget plugin (social-media-widget), make sure to remove it immediately from your…
Comment SPAM Bad Neighborhood Analysis (2013-Mar)
We track and block a lot of comment SPAM via our WordPress plugin and our CloudProxy WAF. One thing we noticed is that the majority…
Virtual Hardening with Sucuri CloudProxy
If you read our blog you know that we are really open to providing insight into malware infections, remediation and hardening tips. The goal is…
Virtual Patching for Websites with Sucuri CloudProxy
All software has bugs, and some bugs can lead to security vulnerabilities. Vulnerabilities can be extremely dangerous when your software is running over the web,…
2012 Web Malware Trends Report Summary
Sucuri is a website security company focused on the detection and remediation of web malware. In 2012, via our SiteCheck scanner, we scanned 9,953,729 unique…