CBS Money Watch / ZDnet hacked and blacklisted by Google
David Dede We are getting reports that the CBS Money Watch and some ZDNet web sites are currently distributing malware and blacklisted by Google. We are still…
Ask Sucuri: What is the Most Common Type of Malware Out There?
If you have any questions about malware, blacklisting, or security in general, send it to us: contact@sucuri.net and we will answer here. For all the…
CreateCSS malware update
We have been talking about this CreateCSS malware for a little while, but recently we started to see a shift on how the attackers are…
Automattic / WordPress hacked – Security incident
The guys from Automattic (WordPress) posted today a brief statement about a security incident that they suffered. Tough note to communicate today: Automattic had a…
Link injection on hacked WordPress sites – Blackhat SEO spam
The last few months we’ve been tracking, and helping webmasters affected by a very large blackhat SEO spam campaign initiated by basicpills.com, and many other…
Database Injection on Joomla Websites – yourstatscounter dot cz dot cc
It seems that a good amount of Joomla sites are being infected with malware from the infamous “.cc” domains. All of the hacked sites have…
WordPress 3.1.1 is available (security fixes)
There is a new version of WordPress available (3.1.1) that includes multiple security fixes. These are the changes according to WordPress.org: Some security hardening to…
Continuing attacks against osCommerce: khcol.com
Busy week for osCommerce in terms of malware. First, the div_colors string, then, the CreateCSS string, and now, we are seeing thousands of osCommerce sites…
LizaMoon Mass SQL injection (ur.php) – Updates
There has been a lot of talk for the last few days about a mass sql injection targeting IIS/ASP.net sites. Those attacks has been going…
Ask Sucuri: How Long To Remove Google’s Blacklist?
If you have any questions about malware, blacklisting, or security in general, send it to us: contact@sucuri.net and we will answer here. For all the…
Database injection, lessthenaminutehandle.com and more updates
We posted a few weeks ago about a large scale database injection attack affecting WordPress on shared hosts. The infected sites got the following javascript…