Backdoor Targets FreePBX Asterisk Management Portal
Krasimir Konov Written in PHP and JavaScript, FreePBX is a web-based open-source GUI that manages Asterisk, a voice over IP and telephony server. This open-source software allows…
Browsing Category
Website Malware Infections
857 posts
How to Fix & Remove the “Click Allow If You Are Not a Robot” Redirect
Eli Trevino Attackers are always finding unique ways to avoid detection. Our teams regularly find malware on compromised websites which have been obfuscated to make it more…
Chinese Gambling Spam Targets World Cup Keywords
Denis Sinegubko Since 2018, our team has been tracking an interesting type of website infection where the <title> tag of a hacked website is changed to Chinese…
New Wave of SocGholish cid=27x Injections
On November 15th, Ben Martin reported a new type of WordPress infection resulting in the injection of SocGholish scripts into web pages. The attack loads…
New SocGholish Malware Variant Uses Zip Compression & Evasive Techniques
Ben Martin Readers of this blog should already be familiar with SocGholish: a widespread, years-long malware campaign aimed at pushing fake browser updates to unsuspecting web users.…
![Massive ois[.]is Black Hat Redirect Malware Campaign Targets WordPress Sites](https://blog.sucuri.net/wp-content/uploads/2022/11/BlogPost_Feature-Image_1490x700_PHP-Login-Stealer-390x183.png)
Massive ois[.]is Black Hat Redirect Malware Campaign
Since September 2022, our research team has tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is. These malicious redirects…
Malware vs Virus: What’s the Difference?
Stephen Johnston There appears to be a general misunderstanding among internet users about the difference between malware and viruses. The two terms are often used interchangeably —…
Wordfence Evasion Malware Conceals Backdoors
Malware authors, with some notable exceptions, tend to design their malicious code to hide from sight. The techniques they use help their malware stay on…
SiteCheck Malware Trends Report – Q3 2022
Rianna MacLeod For the latest malicious scripts, check out our SiteCheck 2023 Mid-Year Malware Trends report. Our free SiteCheck remote website scanner provides immediate insights about malware…
New Malware Variants Serve Bogus CloudFlare DDoS Captcha
When attackers shift up their campaigns, change their payload or exfiltration domains, and put some extra effort into hiding their malware it’s usually a telltale…
What is Virtual Patching: A Guide to Preventing Vulnerabilities
John Booker All software has bugs — but some bugs can lead to serious security vulnerabilities that can impact your website and traffic. Zero-day vulnerabilities can be…