WordPress Pluggable.php Being Compromised
Daniel Cid The last few days we have seen a large number of WordPress sites compromised with a hidden malware payload that lands inside wp-includes/pluggable.php. This is…
Redirection Malware Very Good Leads to Fake AV
If you look at our Labs malware dump for the last few days, you will find something odd in the name of the top domains…
Blackmuscats Conditional Redirections to Fake AntiVirus
We are seeing many sites today compromised with the Blackmuscats conditional redirection. This malware causes anyone visiting the hacked site to be redirected to a…
WordPress and Server Hardening – Taking Security to Another Level
Update 11/3/2017: Need to learn how to secure your WP site? Check out our latest guide on vulnerabilities, best practices and protection. Update 9/14/16:…
New Web Malware Attacks Using .Ru/In.CGI?16
What does an orange roller, a purple beetle, an orange moth, a green pillar, and a green cricket have in common? Not much, but they…
vBulletin Websites Using VBSEO Being Infected with Malware
We are seeing a large number of vBulletin/vBSEO websites getting compromised lately and we keep getting requests for info as to what’s going on.
ASK Sucuri: What should I do if my email is in the Yahoo Leak?
We love to get questions from you, our readers, in our Ask Sucuri series. If you have any questions about website malware, blacklisting, or security…
Analysis of Yahoo Voice Password Leak – 453,441 Passwords Exposed
We recently heard that a massive leak of Yahoo passwords has been floating on the interwebs for a few days. According to Ars Technica, the…
Distributed Malware Network Outbreak Using Stats.php
We are seeing a large and distributed malware network comprised of thousands of infected websites that is growing very quickly. We call it “Stats.php” because…
Malware That Pretends To Be Google
Malware authors (AKA the criminals or the bad guys), use many advanced techniques to hide their activities. From encoding, to encrypting, to auto-generated random domains,…
Uploadify, Uploadify and Uploadify – The New TimThumb?
We are seeing a lot of noise again regarding the Uploadify script vulnerabilities affecting some WordPress themes/plugins. If you are not familiar, Uploadify allows anyone…