SFTP/FTP Password Exposure via sftp-config.json
Daniel Cid Have you heard of the file sftp-config.json? You haven’t? Neither did we until a few weeks ago. It is used by some SFTP/FTP clients (Sublime…
More Fake jQuery sites – jqueryc.com
We keep seeing fake jQuery sites popping up and being used to distributemalware. One was jquerys.org, other was jquery-framework.com and the new oneis jqueryc.com (199.59.241.179).…
co.cc seems to be gone
It seems that the .co.cc (sub TLD) that used to be mass used byspammers and malware is now gone. Their registration page is offline: $…
Out-of-date Software Affects Websites Big and Small
Last week we published an article listing some big and popular websites that were leaking information about their users via the Apache server-status page. We…
Popular sites with Apache server-status enabled
Apache has a very useful functionality called server-status that allows administrators to easily find how well their servers are performing. It is basically an HTML…
Iframes generator: http://wordpresstest2.info/1.txt
If your site is loading hidden iframes from *.ftp1.biz/pony, look for a curlor file_get_contents call to http://wordpresstest2.info/1.txt.When you visit this site, it generates random iframes:…
Ask Sucuri: How Does SiteCheck Work?
Question: How does SiteCheck work? I just scanned a site that I think is compromised but the scanner is showing it as clean. Is my…
Sorryforthiscode – iFrame Injection
We were working on a compromised site today that had some hidden iFrames on it. The iFrames were redirecting visitors to what seemed like random…
Careful With Fake jQuery Website – jquery-framework. com
A few days ago we posted in our Labs notes about a Fake jQuery website that is distributing malware. The domain was properly chosen to…
Compromised Websites Hosting Calls to Java Exploit
Remember that Java 0 day vulnerability that was discovered a few weeks ago and took a while to get patched by Oracle? You know, the…
Sociable WordPress Plugin Security Warning
If you are using the Sociable WordPress Plugin (plugin with 1,777,161 downloads), be very careful when visiting the plugin’s page settings. We recommend that you…