Analyzing a Malicious iFrame – Following the Eval Trail
Fioravante Souza Over the last week, we’ve been working with some interesting malware injections. Developers and malware prevention professionals usually think of hidden iframes that deliver spam-seo…
Browsing Category
Website Malware Infections
864 posts
BaDoink Website Redirect – Malicious Redirections to Porn Websites on Mobile Devices
Daniel Cid The past week has brought about a large number of cases where compromised websites had hidden redirections to porn injected into their code. All the…
Case Study: Analyzing the Origins of a DDoS Attack
Recently a client was experiencing a massive layer 7 DDOS attack, generating tens of thousands of random HTTP requests per second to the server. The…
Does Sucuri Work With My Host? Yes, Yes We Do.
David Dede We’ve been scanning and removing malware from websites for years and in this time frame we have seen the website security domain grow by leaps…
Ad Violations: Why Search Engines Won’t Display Your Site If it’s Infected With Malware
As your website’s webmaster have you ever seen an e-mail from Google like this?: Hello, We wanted to alert you that one of your sites…
Windigo Linux Analysis – Ebury and Cdorked
Our friends over at ESET released a very detailed document about the Windigo Operation. The Windigo Operation has been responsible for the compromise of thousands…
Highly Effective Joomla Backdoor with Small Profile
It feels like every day we’re finding gems, or what appear to be gems to us. We try to balance the use of the term,…
Malicious iFrame Injections Host Payload on Tumblr
It’s always fun to watch malware developers using different techniques to code their creations. Sometimes it’s a matter of obfuscation, placement, injection, but this time…
PHP Backdoors: Hidden With Clever Use of Extract Function
When a site gets compromised, one thing we know for sure is that attackers love to leave malware that allows them access back into the…
Mysterious Zencart Redirects Leverage HTTP Headers
Denis Sinegubko About a week ago we got an interesting Zencart case. Being that we don’t often write about Zencart we figured it’d be good time to…
Layer 7 DDOS – Blocking HTTP Flood Attacks
There are many types of Distributed Denial of Service (DDOS) attacks that can affect and bring down a website, and they vary in complexity and…