Introducing Sucuri Labs – Complimenting the Sucuri Research Blog
Tony Perez The content of this site is often a compilation of information derived from our internal lab. Today, we are happy to announce that components of…
Browsing Category
Website Malware Infections
840 posts
Sucuri Introduces Server-Side Scanning
Today we released to all our clients a new feature that will improve the accuracy and effectiveness of all our scanners – server-side scanning. If…
List of Domains Hosting Webshells for Timthumb Attacks
Daniel Cid We have been tracking TimThumb related attacks for a while and they are still at full force (yes, some people are still using the outdated…
Websites Compromised with Fake AV Campaign (Windows Web Secure Kit)
“To help protect your computer, Windows Web Secure Kit have detected trojans and is ready to remove them”. We are seeing many WordPress sites compromised with a malware…
Wpstats. org Spam and a Fake Advanced Search Plugin
If you are seeing hidden links in your WordPress site, it could be coming from wpstats.org. On some blackhat spam cases we are analysing, the…
Sucuri WordPress Security Plugin Protects Against PHP-CGI Vulnerability
Today we released an update on the latest PHP CGI vulnerability and provided some additional information that users can use to help protect against it.…
PHP-CGI Vulnerability Exploited in the Wild
When the PHP-CGI vulnerability was disclosed, we knew it would be just a matter of days before it started to be exploited in the wild.…
Sucuri SiteCheck – Web Malware Distribution – April 2012
When we see a compromised site distributing malware, it is often done via 4 methods: Iframe, Javascript, Spam or internal redirections. Those are not the…
New WooThemes Vulnerability Patched – Update Framework Now!
Yesterday a vulnerability on the WooThemes Framework was disclosed by Jason Gill on githumb:gist. The vulnerability allows a visitor to see and run the output of…
Ransomware Malware on the Web?
As the week comes to a close I wanted to take a minute to talk about something we haven’t yet – Ransomware Malware. The idea…
Malware campaign against WordPress sites (recovery-hdd dot eu)
We have been tracking a new malware campaign that has been compromising thousands of WordPress sites over the last 3 days. They are not doing…