Hilary Kneber Again – welcometotheglobalisorg
David Dede We are seeing (again) a number of sites infected with a variation of the welcometotheglobalisnet.com malware string that appeared a few weeks ago. The details…
Browsing Category
Website Malware Infections
864 posts
Brenz.pl is Back With Malicious iFrames
We used to see brenz.pl being used to distribute malware back in 2009, and got shut down. However, for the last few weeks we noticed…
Alexa TOP 100k Sites – The Malware Blues
How big do you think the web-based malware problem is? How many sites do you think were hacked and/or infected with malware in the last…
Alexa top sites – Blacklist for January/2011
Every month we analyze Alexa’s TOP 1 million site ranking and correlate that data with Google’s blacklist. Our goal is to get an overall view…
The attack from the .cc’s domains
Over the last few days we’ve continued to see a large increase in the number of sites hacked and infected with a malicious iframe from…
Hilary Kneber Strikes Again – welcometotheglobalisnet
It seems that after a few months quiet, the “Hilary Kneber” group is back at it again. Their latest approach is very typical of Hilary…
Cleaning up an infected website – Part I: WordPress and the Pharma Hack
New release! On 11/03/2017 everything you need to know on how to secure your WP site came out and it includes best practices and a…
Large Blackhat SEO SPAM Campaign Targeting Joomla Sites
We are seeing a large number Joomla sites hacked and being used in a blackhat SEO SPAM campaign consisting of thousands of infected web sites.…
Weekly Malware Update – 2010/Feb/11
Weekly malware update. You can track all updates by following our malware_updates category. *If your site has been affected with any of these issues, contact…
Weekly malware update – 2010/Jan/31
Weekly malware update. You can track all updates by following our malware_updates category. *If your site has been affected with any of these issues, contact…
Backdoor: No malware on this code, you can check it by yourself
We were cleaning up an infected web site a few days ago and it had multiple backdoors. They all started like that: <?php // ketek90@gmail.com…