Attacks Against Timthumb.php in the Wild – List of Themes and Plugins Being Scanned
David Dede We are seeing large scale attacks against the vulnerable timthumb.php script in the wild. Thousands of sites are getting compromised and if you have it…
Browsing Category
Website Malware Infections
865 posts
WordPress sites with .htaccess hacked
The TimThumb.php vulnerability is causing a lot of WordPress sites to get compromised with the superpuperdomain.com and superpuperdomain2.com remote JavaScript injection. However, that’s not all…
TimThumb.php Vulnerability Not Only Affecting Themes – Plugins too
The Timthumb.php vulnerability is being used in the wild to hack and infect thousands of WordPress sites. Hopefully everyone is checking their themes and updating…
Non-Stop Attacks Against osCommerce – Time to Take Action
The malware attacks against osCommerce sites are still going at full force and the site owners have to take action to secure and update their…
Update to the Superpuperdomain2.com malware
Just a quick update to the Superpuperdomain2.com/Superpuperdomain.com malware infection that has been affecting thousands of WordPress sites with the vulnerable timthumb.php script. You can read…
WordPress Sites Hacked with Superpuperdomain2.com
A few days ago we posted about a series of attacks that were happening against WordPress sites running the vulnerable timthumb.php script. We detected thousands…
WordPress Sites Hacked with Superpuperdomain dot com (Attacking Timthumb.php)
We are seeing a large number of WordPress sites compromised with a malicious JavaScript loading from superpuperdomain.com/count.php. That JavaScript redirects visitors that were going to…
Attacks against osCommerce sites – Spam / google_analytics_obh
It seems that the attacks against osCommerce are not going to stop any time soon. With so many valuable targets (online stores) that are not…
Mass Compromise of Sites at gogvo.com – SEO Spam
A regular topic of discussion the past few months has been the basicpills link injection (a type of blackhat seo spam) on WordPress sites. If…
Host4africa Mass Compromise
We are seeing a lot of sites hosted at host4africa.com compromised with Blackhat Spam SEO. Most of them are in the .co.za TLD (at 74.53.0.0/16…
The Danger of Remote Widgets – Feedcat.net Sold and Now Distributing Malware
Do you like to add all types of “widgets” and cool badges to your site? Be careful which ones do you choose, or your site…