Malicious Magento User Creator
Krasimir Konov We recently found a simple malicious script leveraging Magento’s internal functions to create a new admin user with the admin role “Inchoo” — probably referring…
Browsing Category
Website Security
1037 posts
Fake WordPress Plugin SiteSpeed Serves Malicious Ads & Backdoors
Fake WordPress plugins appear to be trending as an effective way of establishing a foothold on compromised websites. During a recent investigation, we discovered a…
Web Professional Security Survey 2020
Art Martori According to recent statistics, the web design industry in the United States is now worth more than $40 billion each year. It’s why our annual…
Spox Phishing Kit Harvests Chase Bank Credentials
Luke Leal Phishing kits are the back end components to a phishing attack and are often designed to make it easier to deploy a phishing page. These…
Pirated WordPress Plugins Bundled with Backdoors
One widespread belief among webmasters is that attackers typically only compromise websites in a couple of ways: by exploiting vulnerabilities or stealing login credentials. Although…
Dangerous Website Backups
Denis Sinegubko It’s a well-known fact that website backups are important for mitigating a plethora of site issues. They can help restore a site after a compromise…
What is the Gibberish Hack?
Justin Channell Discovering some random folder with numbers and letters you don’t remember on your website would make any website owner put on their detective cap. At…
What is a Website Defacement?
Website defacement is the most obvious sign of a hack. In these cases, bad actors who have gained access to an environment leave their mark…
Evasion Tactics in Hybrid Credit Card Skimmers
The most common type of Magento credit card stealing malware is client-side JavaScript that grabs data entered in a checkout form and sends it to…
Labs Notes Monthly Recap – May/2020
Juliana Lewis In 2020, we doubled up our research efforts to report on many new attacks and hacks that we see in the wild. We believe that…
Malicious Curl Downloader
If you want to easily download and save remote files, curl is an excellent command-line tool for Windows and Unix. It supports HTTP, HTTPS, and…