Sneaky Joomla Web Malware – JavaScript Infections
Tony Perez So the past week has been interesting, we have been having fun with a few JavaScript infections that really forced us to put on our…
Various Shades of Malware – Abusing Your Resources
We often write about very clear cut cases of malware activity. The attacker is leveraging your traffic, redirecting it to other locations, or injecting things…
Web Server Compromise – Debian Distro – Identify and Remove Corrupt Apache Modules
Came across another server compromise this week. Client was complaining that the following kept being injected into their JavaScript files: document.write("<style.vb4brk { position:absolute; left:-1655px; top:-1476px} </style> <div…
Server Compromises – Attackers Covering Their Tracks
When you’re remediating servers, one of the things you’re always looking for are any traces that show the attacker is trying to cover their tracks.…
Twitter Suffers Compromise – Enterprise Attacks Continue
Looks like Twitter is the latest to get bit in the butt. They just put out the following on their blog: This week, we detected…
Web Server Attacks – Apache Modules, Log Management and RELM
New year, same tricks, mostly because they work. That’s how we’re kicking off the new year folks. In September of 2012, Dennis, of Unmask Parasites,…
Website Security – The Importance of Access
I’m not sure why more emphasis isn’t put on access in website security discussions, but I’ll spend some time on it today. Understand that this…
WordPress SPAM Causing Headaches
Newly Released: On 11/3/2017 we published our guide on how to secure your WordPress site and it also talks about vulnerabilities and best practices. It…
Ruby on Rails Vulnerability Leads to Remote Command Execution on Servers
As always, the year is kicking off with a bang. This is a public service announcement to get the word out on a very serious…
Website Malware – Drupal Injections Targeting Cookies
Many folks are unfamiliar with the Drupal CMS, it doesn’t enjoy the popularity that some others do like WordPress and Joomla, but its a powerful…
Website Malware – Sharp Increase in SPAM Attacks – WordPress & Joomla
This past week we have seen a sharp increase in the use of old tactics designed to poison your search engine results – also known…