A new place to hide web-based malware: php.ini + cgi-bin
David Dede We got a call this weekend from a desperate site owner that had just found out that his site was hacked and hosting malware. He…
Browsing Category
Website Malware Infections
863 posts
Network Solutions update and some numbers
I am getting a lot of questions via email or via the comments on what to do if a site hosted at Network Solutions is…
Malware hiding from Google
Google is getting pretty good at detecting web-based malware and blacklisting the sites that are hosting it. This means bad business for the attackers (or…
Targeted web-based malware – Case study
We deal with web-based malware every day here at Sucuri. Most of them are very simple and easy to detect, but once in a while…
Perl.com hacked – Security archive case study
Security Archive: Remembering security incidents to make sure we don’t commit the same mistakes over and over again. Want to read more stories like this…
A closer look at the Skipfish
Skipfish was just released last week by Michal Zalewski and it seems that in just those few days out there, everyone is talking about it.…
Removing malware from a web site – Case Study
We deal with web-based malware every day here at Sucuri. Some are encrypted and very hard to detect and remove, but most of them are…
Screenshot of the apache.org defacement (10 years ago)
We recently published a case study of the apache.org defacement that happened 10 years ago. You can read it here: Apache.org defaced – Security archive…
Venezuela Government site hacked and spreading malware
Since we have been noticing that full-disclosure works, we will continue with that. We have detected in our honeypots that since January the site www.miranda.gov.ve…
Colombia Government sites hacked (and spreading malware)
Daniel Cid You would expect that a security-related web site would be secure, no? What about an official web site from a Government? Should that be safe?…
Georgia government sites hacked (and spreading malware)
*UPDATE: A few hours after this post, they removed the malware from justice.gov.ge and other sites. I am glad we had some effect. You know,…