Distributed Malware Network Outbreak Using Stats.php
Daniel Cid We are seeing a large and distributed malware network comprised of thousands of infected websites that is growing very quickly. We call it “Stats.php” because…
Browsing Category
Website Malware Infections
859 posts
Malware That Pretends To Be Google
Malware authors (AKA the criminals or the bad guys), use many advanced techniques to hide their activities. From encoding, to encrypting, to auto-generated random domains,…
Microsoft XML Core Service Zero Day Vulnerability Being Targeted
Tony Perez On June 12th we reported the release of a new Microsoft Security Advisory. It was of specific interest to us as it was exploitable via…
Uploadify, Uploadify and Uploadify – The New TimThumb?
We are seeing a lot of noise again regarding the Uploadify script vulnerabilities affecting some WordPress themes/plugins. If you are not familiar, Uploadify allows anyone…
Plesk Vulnerability Leading to Malware
Our friends over at Unmask Parasites posted two very good reports about a mix of Plesk vulnerabilities being used to mass-compromise websites, and redirecting them…
Sucuri Labs Weekly Review – June 22nd – 2012
Have you checked out Sucuri Labs? We have been adding a daily feed of the top web-based malware samples that we find every day, and…
Understanding Conditional Malware – IP Centric Variation
In today’s web malware landscape you can’t help but take a minute to familiarize yourself with a concept known as conditional malware. As implied in…
Sucuri SiteCheck – Web Malware Distribution – May 2012
Last month ( May 2012), we were able to identify 94,866 compromised (hacked) websites using our free SiteCheck scanner. These were the top infections per…
Introducing Sucuri Labs – Complimenting the Sucuri Research Blog
The content of this site is often a compilation of information derived from our internal lab. Today, we are happy to announce that components of…
Sucuri Introduces Server-Side Scanning
Today we released to all our clients a new feature that will improve the accuracy and effectiveness of all our scanners – server-side scanning. If…
List of Domains Hosting Webshells for Timthumb Attacks
We have been tracking TimThumb related attacks for a while and they are still at full force (yes, some people are still using the outdated…