Security Education Archives

WordPress Continues to Fall Victim to Carding Attacks

Ben Martin
April 14, 2021

Unsurprisingly, as WordPress continues to increase in popularity as an e-commerce platform, attackers continue to attempt to steal credit card information from unsuspecting clients. Currently, the WordPress plugin WooCommerce accounts for roughly a quarter of all…

Read the Post

How to know if you are under ddos attack

How to Know If You’re Being DDoSed

Stephen Johnston
April 7, 2021

Nowadays, the term DDoS raises the heart rate of most webmasters. Though many don’t know exactly what a DDoS attack is, they might be familiar…

Read the Post

The Importance of Website Backups

Juliana Lewis
March 31, 2021

Today is World Backup Day. This date was created to remind people of the importance of having backups set up for everything that matters. I am pretty sure your website falls into…

Read the Post

How Do Websites Get Hacked?

Mike Martens
March 25, 2021

As much as the web has grown, surprisingly not a lot has changed in how websites get hacked. The most important thing you can do…

Read the Post

Trojan Spyware and BEC Attacks

Luke Leal
March 3, 2021

When it comes to an organization’s security, business email compromise (BEC) attacks are a big problem. One primary reason impacts are so significant is that…

Read the Post

UCEPROTECT Scam: When RBLs Go Bad

Marc Kranat
February 12, 2021

What is a Realtime Blackhole List (RBL)? A Realtime Blackhole List (RBL) contains lists of email servers, domain names, and IP addresses that are associated…

Read the Post

Server Side Data Exfiltration via Telegram API

Optimizing Performance and Behavior with WordPress and the Sucuri WAF

Marc Kranat
February 9, 2021

Aside from providing significant protection from a wide range of threats, the Sucuri WAF also acts as a CDN due to its caching capabilities and…

Read the Post

Whitespace Steganography Conceals Web Shell in PHP Malware

Denis Sinegubko
February 2, 2021

Last November, we wrote about how attackers are using JavaScript injections to load malicious code from legitimate CSS files. At first glance, these injections didn’t…

Read the Post

Phishing & Malspam with Leaf PHPMailer

Luke Leal
January 26, 2021

It’s common knowledge that attackers often use email as a delivery mechanism for their malicious activity — which can range from enticing victims to click…

Read the Post

Critical Vulnerabilities in 123contactform-for-wordpress WordPress Plugin

Rodrigo Escobar
January 19, 2021

In mass infection scenarios, our Malware Research team often looks for attack vectors to find patterns and other similarities among compromised websites. The identification of…

Read the Post

Real-Time Phishing Kit Targets Brazilian Central Bank

Luke Leal
January 14, 2021

We recently found an interesting phishing kit on a compromised website that has QR code capabilities, along with the ability to control the phishing page…

Read the Post