Website Vulnerability vs. Malware – What’s the Difference?
Art Martori To better understand the difference between website malware and vulnerabilities, imagine your online property is a brick-and-mortar structure. You’d want to keep safe from burglars,…
Browsing Category
Website Malware Infections
866 posts
How to Find & Remove SEO Spam on WordPress
Sucuri Perhaps the best way to dive into the subject of finding and removing SEO spam on WordPress is with a quick experiment — probably one…
Is My Site Hacked? (7 Signs)
Rianna MacLeod Editorial: This post was last updated October 26th, 2022. It’s a day every website owner fears. You open the website you’ve poured your time, energy,…
Abused Cloudflare Workers Service Used to Inject Korean SEO Spam
Luke Leal We were recently contacted by a website owner about some malicious injected spam links that were being indexed by Google’s search engine crawler Googlebot. What…
What is Ransomware?
Originally published: February 12, 2020 by Justin Channell Ransomware has been one of the scariest topics in cybersecurity for years – and for good reason.…
Magento Credit Card Stealer: harilov[.]com
Our Remediation team lead Ben Martin recently discovered a single line obfuscated PHP injection in the main index.php file of a Magento 1.9.x website. It…
Email Scraper: Mass Mail Grabber from Database
One of our Remediation team analysts, Liam Smith, discovered a malicious file on a client’s compromised WordPress website that demonstrates how attackers can use rudimentary…
Fixing “Uncommon Download” Warnings in Google Search Console
Alycia Mitchell Over the past few months, a lot of website owners have received “uncommon download” warnings from Google Search Console. These warnings can be vague, often…
Password Attacks 101
Cesar Anjos One of the most common attacks carried out nowadays is related to cracking passwords, but most people probably just know about brute-forcing. There are, in…
PHP Dropper Concealed in Malicious WordPress Plugin
Moe Obaid – an analyst from our Remediation Team – recently found a PHP dropper that had been installed as a malicious WordPress plugin. Unlike…
Stored XSS in Elementor
Marc-Alexandre Montpas During a routine audit of WordPress plugins last december, we discovered a Stored XSS vulnerability in the very popular Elementor Page Builder plugin, which powers…