Analysis of a Malicious Blackhat SEO Script
Krasimir Konov An enormous number of SEO spam infections are handled by us here at Sucuri. In our most recent hacked website trend report, we analyzed over…
New wave of wp-vcd Malware
Recently we saw a new wave of a known malware that injects malicious WordPress admin users to vulnerable or compromised sites.The malware, well analysed by…
Malware Serving SEO Spam from External Sites
We handle an enormous number of SEO spam infections here at Sucuri. In Q3 of 2016, approximately 37% of all website infection cases were related…
Credit Card Stealer Investigation Uncovers Malware Ring
During a recent investigation, I found a new piece of malicious code being used to steal credit card information from compromised Magento sites. What I…
SEO spam loading from external site
Many websites get compromised and used for SEO in order to drive traffic to other websites that would usually be ranked very low or completely…
Expired Domain Leads to WordPress Plugin Redirects
A malicious redirect is a snippet of code used by attackers with the intention of redirecting visitors to another site; a very common tactic seen…
JavaScript Used to Generate Malicious Documents
When talking about compromised environments, we often think that the website itself is the end goal but that’s not always true. In some cases, attackers…
Yet Another Expired Domain causes WP Plugin to Redirect Users
Malicious redirects are very common in compromised websites. Attackers try to take advantage of the site resources to promote spam, distribute other malware/backdoors, and perform…
JavaScript Injections Leads to Tech Support Scam
During a recent malware investigation, we found some interesting obfuscated Javascript code. This code pretends to appear as part of the popular AddThis social sharing…
Magento Login and Credentials Stealer
Lately we’ve been dealing with an increase in attacks against ecommerce platforms. Attackers usually choose this type of solution (like Magento & others) because of…
Hidden iframe Injected into WordPress core file
Injecting malware into core files of CMS installations is one of the techniques attackers use. From the user’s perspective, it is easier to detect and…