IPv6 address in malicious Javascript redirect
Luke Leal We recently came across a file that shows an interesting case with a Javascript malicious code injection in a website’s custom script file, though it’s…
Browsing Category
Sucuri Labs
336 posts
Fake jQuery and Google Analytics Hide Yet Another Cryptominer
Denis Sinegubko This is a quick posts about yet another quite massive attack that installs CoinHive JavaScript Monero miners on compromised websites. You might have already read…
New wave of wp-vcd Malware
Krasimir Konov Recently we saw a new wave of a known malware that injects malicious WordPress admin users to vulnerable or compromised sites.The malware, well analysed by…
Attackers leveraging WP Maintenance plugin to deface websites
Bruno Zanelato Recently, during a website investigation, we detected that attackers have been modifying the database structure of WP Maintenance plugin (which is a very popular wordpress…
Books SEO Spam
Fernando Barbosa We already discussed in our blog some cases where the attacker uploaded a full ready-to-use website in order to promote their products and services. This…
Simple self updating hacktool
Pedro Peixoto While working on a compromised website, it’s very common to encounter hacktools. Those are like the attackers’ swiss knife, allowing them to perform several tasks…
Soccer spam. Really?
In the last few months, we’ve covered several cases of SEO Spam in our labs and blog that were promoting products and services ranging from…
Mayhem malware still on the wild
Jose Martinez Years ago, colleagues from Yandex introduced the concept of Mayhem infections. In that post, they provided very detailed information about the malware, its functionalities and…
SEO spam loading from external site
Many websites get compromised and used for SEO in order to drive traffic to other websites that would usually be ranked very low or completely…
Evil Self-Regenerating WordPress Administrator User
Andrey Kucherov Attackers often aim to conceal their presence using different methods, such as injecting redirect scripts, creating spam pages, or hiding a mailer in checkout pages…
When Online Shopping leads to Malware download
Ahmad Azizan Idris Recently, during an incident response process, we worked on an interesting Magento website. This site was reported to having a strange redirection when users visited…