Website Malware Infections- Website Security News

WordPress Sites Hacked with Superpuperdomain dot com (Attacking Timthumb.php)

David Dede

August 11, 2011

We are seeing a large number of WordPress sites compromised with a malicious JavaScript loading from superpuperdomain.com/count.php. That JavaScript redirects visitors that were going to…

Read the Post

Attacks against osCommerce sites – Spam / google_analytics_obh

David Dede

August 9, 2011

It seems that the attacks against osCommerce are not going to stop any time soon. With so many valuable targets (online stores) that are not…

Read the Post

Mass Compromise of Sites at gogvo.com – SEO Spam

David Dede

August 4, 2011

A regular topic of discussion the past few months has been the basicpills link injection (a type of blackhat seo spam) on WordPress sites. If…

Read the Post

Host4africa Mass Compromise

David Dede

August 2, 2011

We are seeing a lot of sites hosted at host4africa.com compromised with Blackhat Spam SEO. Most of them are in the .co.za TLD (at 74.53.0.0/16…

Read the Post

The Danger of Remote Widgets – Feedcat.net Sold and Now Distributing Malware

David Dede

July 28, 2011

Do you like to add all types of “widgets” and cool badges to your site? Be careful which ones do you choose, or your site…

Read the Post

Google blocks .co.cc, attackers are now using .co.tv

David Dede

July 6, 2011

It is being reported that Google took action against the high number of malware sites in the .co.cc domain, removing more than 11 million sites…

Read the Post

Links Injection on WordPress – Blackhat SEO Spam (basicpills) update

David Dede

June 3, 2011

For the last few months we’ve been tracking a very large blackhat SEO spam campaign initiated by basicpills.com, and many other pharma-related domains (mostly located…

Read the Post

Understanding .htaccess attacks – Part 1

David Dede

May 27, 2011

Attackers have been using the .htaccess file for a while. They use this file to hide malware, to redirect search engines to their own sites…

Read the Post

LizaMoon SQL injections (ur.php) – Now vcvsta.com, asweds.com, etc.

David Dede

May 25, 2011

A couple of months ago the Lizamoon malware / Mass SQL injection was getting a lot of news coverage that it could be affecting hundreds…

Read the Post

osCommerce malware: Cannot redeclare corelibrarieshandler

David Dede

May 19, 2011

We have been posting for a while about attacks targeting and infecting thousands of osCommerce sites (CreateCSS, div_colors, etc) and the importance of keeping it…

Read the Post