How Some OTP Systems Can Be Used to Prank Spam
Luke Leal I recently came across an interesting index.php file and its corresponding directory on a compromised website. I loaded it in a testing environment and immediately…
Hackers Are Just as Vulnerable as You
I came across some interesting defacement pages recently and noticed a peculiar JavaScript injection included within each source code of the defaced websites. As shown…
An Old Trick with a New Twist: Cryptomining Through Disguised URL Shorteners
As we have previously discussed on this blog, surreptitious cryptomining continues to be a problem as new methods emerge to both evade and hasten the…
IPv6 address in malicious Javascript redirect
We recently came across a file that shows an interesting case with a Javascript malicious code injection in a website’s custom script file, though it’s…
Checking blacklisted domains or IP for spamming
Often times we will encounter websites that have been injected with a redirect and these can vary from blackhat SEO tactics for boosting domain rankings…
Search and Backdoor
The ubiquity of “unlimited” shared hosting platforms has incentivized malware in trying to infect as many adjacent website directories as it can to increase its…
Camouflage does not have to be advanced to be effective
Often times a malware author will try to provide some type of camouflage to their malware’s coding in an effort to disguise an unsuspecting eye…
Not that impressive hack tool
There is often a misconception regarding the tools that attackers implement in their malicious activity, and that misconception is that they must be using advanced…
Ask Sucuri: Can Your cPanel Page Be Maliciously Redirected?
Many webmasters may not be aware that hackers are able to maliciously redirect cPanel pages. The specific tactic we describe in this article is unique.…
Spam SEO Injector Circumventing Defense Techniques
I was assisting a client with their compromised website and came across a file called unsave.php that was primarily used to inject a rewrite into…
Analyzing and Cleaning Hijacked Google SEO Spam Results
Blackhat SEO spam comes in many forms, and one of the most nefarious is hijacked search results. This happens when search engines crawl and display…