Website Malware Infections- Website Security News

Unauthenticated settings update in woocommerce-ajax-filters

John Castro

September 18, 2019

woocommerce-ajax-filters, which currently has over 10,000 installations (versions <=1.3.6) allows unauthenticated attackers to arbitrarily update all the plugin options and redirect any user to an…

Read the Post

Misuse of WordPress update_option() function Leads to Website Infections

John Castro

September 16, 2019

In the past four months, Sucuri has seen an increase in the number of plugins affected by the misuse of WordPress’ update_option() function. This function…

Read the Post

Throwback Threat Thursday: Joomla GoogleMaps Plugin SEO Spam Injection

Fioravante Souza

September 5, 2019

Throwback Threat Thursday is a series of posts where we recall older vulnerabilities that have since been patched by their developers. In the past, these…

Read the Post

What is Cryptocurrency Mining Malware?

Brian Bautista

September 2, 2019

Before we get into the details of “Cryptocurrency Mining Malware”, we need to understand first what cryptocurrency is and what miners are. What is Cryptocurrency?…

Read the Post

TimThumb Vulnerability: Throwback Thursday

TimThumb Attacks: The Scale of Legacy Malware Infections

Denis Sinegubko

August 29, 2019

These days, we consider a malware campaign massive if it affects a couple thousand websites. However, back in the day when Sucuri first started its…

Read the Post

Lack of controls when using WordPress’ update_option() with user input data equals plugin nightmare

John Castro

August 20, 2019

As mentioned in recent posts, WordPress’ update_option() function is used to update any option in the options database table. If the permission flow when using…

Read the Post

What Hackers Do After Getting Access to a Website

What Hackers Do after Gaining Access to a Website

Pilar Garcia

August 15, 2019

A hack or cyber attack is the act of maliciously entering, taking control over, or manipulating by force a web application, server, or file that…

Read the Post

Skimmers and Phishing

Denis Sinegubko

August 14, 2019

Recently, we shared a post about a network of domains used in a JavaScript credit card stealing malware campaign. These domains are all hosted on…

Read the Post

Our security analyst Christopher Morrow recently discovered a server-side Magento skimmer that was injected into the savePayment function in the app/code/core/Mage/Checkout/Model/Type/Onepage.php file. This code emails…

Read the Post

Troldesh Ransomware Dropper

Luke Leal

August 12, 2019

Over the past few weeks, we’ve seen an increase in Troldesh ransomware using compromised websites as intermediary malware distributors. The malware often uses a PHP…

Read the Post

Hydro-Quebec phishing

Luke Leal

August 7, 2019

We have found an interesting phishing kit containing numerous phishing pages which target large, popular brands like Amazon and Paypal. What was interesting about this…

Read the Post