e107 Being Exploited – Vulnerable contact.php Scanned and Attacked
David Dede We are seeing an old vulnerability on e107 being widely scanned and exploited. e107 is a free open source content management system (CMS). More details…
Browsing Category
Website Malware Infections
866 posts
Varying Degrees of Malware Injections Decoded
Rodrigo Escobar It is no longer the day of human-readable injections, or even the use of basic encoding schemes like base64. Instead we’re seeing a rise in…
Website Cross-contamination: Blackhat SEO Spam Malware
Dre Armeda We recently posted about Website Cross-Contamination which we see quite a bit of in shared hosting environments. This post is a follow up with a…
WordPress Third Party Vulnerability – Deans FCKEditor with PWWANGS Code for WordPress(version 1.0.0)
Tony Perez You have heard me write in the past about understanding the true Vulnerability within WordPress. In that post I talk to the benefits of the…
Intelligent (Pharma) Spam Decoded
We are seeing a rise in the use of intelligent SPAM – a.k.a Pharma Hack – across a number of platforms. We recently found a…
Brute force attacks against WordPress sites
Daniel Cid We talk a lot about the importance of using strong passwords, but sometimes it it hard to see how important it really is, or what…
Conditional Redirect Malware Decoded – Eval base64_decode Example
I have this beautiful website and now there’s all this garbled code across all of my PHP files. What’s it do, and how did it…
Latest Mass Compromise of WordPress sites – More Details
We are getting lots of questions about the latest mass compromise targeting WordPress sites (redirecting to fake AV) that has affected over 30,000 domains. The…
Ask Sucuri: Talk More About Web-Based Malware
If you have any questions about malware, blacklisting, or security in general, send it to us: contact@sucuri.net and we will answer here. For all the…
Malware Campaign from .rr.nu
No, they don’t quit, so get used to it! We are seeing quite a few websites being compromised with malware getting loaded from random domains…
Vulnerability in the Absolute Privacy Plugin
We are seeing reports that a vulnerability in the Absolute Privacy WordPress plugin (link) is being used to hack and compromise sites with it installed.…