Website Malware Infections- Website Security News

Google Analytics Swiper Disguised as Legitimate Traffic

Denis Sinegubko

July 23, 2019

At first glance, this short script looks like benign Google Analytics code: <script type=”text/javascript”> (function() { var ga = document.createElement(‘script’); ga.type = ‘text/javascript’; ga.async =…

Read the Post

FBCMS Pharmacy Spam Website

Luke Leal

July 23, 2019

Whenever most people think of a website CMS, they most often think of the popular options like WordPress, Joomla, or Drupal. What do all three…

Read the Post

Reset Email Account Passwords after Website Infection: Follow Up

Luke Leal

July 22, 2019

In a previous analysis of a malicious file, we demonstrated why you should always update your email account passwords after a security compromise. The information…

Read the Post

The Strange Case of the Malicious Favicon

Néstor Angulo

July 18, 2019

During the past year, our Remediation department has seen a large increase in the number of fully spammed sites. The common factors are strangely named…

Read the Post

WPTF Hybrid Composer – Unauthenticated Arbitrary Options Update

John Castro

July 11, 2019

With almost 300 installs, WPTF – Hybrid Composer is a framework that helps users easily create custom themes for WordPress. We recently noticed an increase…

Read the Post

Spam That Fits Your Website

Gabriel Barbosa

July 5, 2019

Most of the time when we talk about spam, we think about mindless machines that create posts or comments to advertise a business related to…

Read the Post

WordPress Plugin WP Statistics: Unauthenticated Stored XSS Under Certain Configurations

Antony Garand

July 3, 2019

The WordPress plugin WP Statistics, which has an active installation base of 500k users, has an unauthenticated stored XSS vulnerability on versions prior to 12.6.7.…

Read the Post

Plugins Under Attack: June 2019

John Castro

June 28, 2019

A long-lasting malware campaign (1,2) targeting deprecated, vulnerable versions of plugins continues to be leveraged by attackers to inject malicious scripts into affected websites. As…

Read the Post

web.config Redirect Malware

Krasimir Konov

June 26, 2019

We recently found this malware on a windows hosting server where the web.config file was modified with the following code. The code redirects multiple user…

Read the Post

Lightbox Adware - From Innocent Scripts to Malicious Redirects

Why is Your Website a Target? The SEO Value of a Website

Douglas Santos

June 24, 2019

Website security is what we eat, sleep, and breathe. It’s what we do best because we deal with hacked websites every single day, thousands of…

Read the Post

Spam Injector Masquerading as Google Analytics

Keith Petkus

June 21, 2019

The domain en-google-analytic[.]com, currently sinkholed by a security intelligence company, has been observed by our team to be part of a mass spam injection campaign.…

Read the Post